Trojaner-Board - malwarebytes-Funde in Quarantäne geschoben->Windows7 startet nur noch im abges.Modus

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - malwarebytes-Funde in Quarantäne geschoben->Windows7 startet nur noch im abges.Modus (https://www.trojaner-board.de/163817-malwarebytes-funde-quarantaene-geschoben-windows7-startet-nur-noch-abges-modus.html)

malwarebytes-Funde in Quarantäne geschoben->Windows7 startet nur noch im abges.Modus

Hallo,
Antivir free Version hatte keinen Virus auf dem System gefunden, ist mit Windowsfirewall als einziger Schutz bisher aktiv, immer aktuell gewesen (windows 7 home premium 64 bit, alle updates).
Da ich auf einem anderen meiner PCs jetzt Malware entdeckt hatte und mittels adwcleaner und Malwarebyte erfolgreich entfernt habe, habe ich auch auf diesem Rechner mit Malwarebyte einen Scan durchführen lassen, er fand ca. 44 Dateien. Habe alle in Quarantäne geschoben, wurde dann gefragt, ob ich einen Neustart durchführen lassen wolle, da einige Probleme wohl nur nach einem Neustart zu beheben sein. Danach kommt es nach der Eingabe des Windowspasswortes zu einem blackscreen, nur noch der weiße Mauszeiger lässt sich bewesen, auch nach Minuten nur mittels Hardreset Neustart möglich, aber nur im abgesicherten Modus, sonst nach Windows-Passworteingabe wieder blackscreen. Habe noch versucht mit malwarebyte alle Dateien aus der Quarantäne wiederherzustellen, dieser meldete mir aber bei etlichen Dateien, diese seien unwiderbringlich gelöscht worden, obwohl ich sie eigentlich nur in Quarantäne gestellt hatte?!

Wie kann ich möglichst schnell mein System wieder zum laufen bringen. Es handelt sich um einen ALDI-PC, besitze also keine Original Windows-CD, nur beim Neustart die Möglichkeit einer Recovery beim Drücken von F11, wobei ich nicht weiß was und wie das funktioniert.
Ich bitte um schnelle Hilfe, vielen Dank im voraus!

BB

Anbei meine log files:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 11:01 on 10/02/2015 (Patrick)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-02-10 11:11:49
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 C400-MTF rev.0002 59,63GB
Running: Gmer-19357.exe; Driver: C:\Users\Patrick\AppData\Local\Temp\fxliyuog.sys

---- Disk sectors - GMER 2.1 ----

Disk \Device\Harddisk0\DR0 unknown MBR code

---- EOF - GMER 2.1 ----

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by Patrick (administrator) on PATRICK-ERAZER on 10-02-2015 11:03:49
Running from C:\Users\Patrick\Desktop
Loaded Profiles: Patrick (Available profiles: Patrick)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Browser)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Deutsche Telekom AG) D:\T-Online_Software_6\Browser\browser.exe
(fun communications GmbH, hxxp://www.fun.de) D:\T-ONLI~1\Notifier\Notifier.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11821160 2011-05-09] (Realtek Semiconductor)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [mylbx] => D:\My Lockbox\My Lockbox\mylbx.exe [2584864 2013-07-06] (FSPro Labs)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [Inno Tilt] => C:\Program Files (x86)\Mouse Driver\Tilt.exe [729088 2009-07-30] ()
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => D:\Avira\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [RemoteControl10] => D:\Program Files (x86)\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink)
HKLM-x32\...\Run: [UpdatePPShortCut] => D:\Program Files (x86)\PowerProducer\MUITransfer\MUIStartMenu.exe [223096 2012-04-17] (CyberLink Corp.)
HKLM-x32\...\Run: [LGODDFU] => D:\Program Files (x86)\lgfw.exe [27760 2012-07-12] (Bitleader)
HKLM-x32\...\Run: [QuickTime Task] => D:\Quicktime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => D:\SONYPlayMemoriesHome\PMBVolumeWatcher.exe [2711576 2014-10-03] (Sony Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2014-11-21] (Malwarebytes Corporation)
HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\Run: [GUDelayStartup] => D:\Glary Utilities 5\StartupManager.exe [37152 2015-01-05] (Glarysoft Ltd)
HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"
HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\MountPoints2: {17db9c87-f84f-11e3-b553-6c626d462129} - "G:\WD Drive Unlock.exe" autoplay=true
AppInit_DLLs-x32: c:\progra~3\browse~1\25976~1.107\{c16c1~1\mngr.dll => "c:\progra~3\browse~1\25976~1.107\{c16c1~1\mngr.dll" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{AA4D1C5E-116A-4FF4-AA91-28F526868203}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
BootExecute: autocheck autochk * BootDefrag.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:49266;https=127.0.0.1:49266
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-297262102-3710466809-3807349961-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://t-online.de/
SearchScopes: HKLM -> DefaultScope value is missing.
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {c1d89ae7-449d-4929-b24b-fded04adbe06} URL = hxxp://isearch.glarysoft.com/?q={searchTerms}&src=iesearch
SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6Oz52MP7G2&loc=skw&search={searchTerms}&i=26
SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> {0583AC13-165A-4DBF-858A-6B3B70556641} URL = hxxp://search.softonic.com/MON00015/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=914
SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> {924658B1-F216-41FC-9A21-5996B5B558B1} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3018509
SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> {c1d89ae7-449d-4929-b24b-fded04adbe06} URL = hxxp://isearch.glarysoft.com/?q={searchTerms}&src=iesearch
SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6Oz52MP7G2&loc=skw&search={searchTerms}&i=26
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {A8F2B9BD-A6A0-486A-9744-18920D898429} hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.15.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-297262102-3710466809-3807349961-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru

Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll No File
CHR Plugin: (Chrome NaCl) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\SysWOW64\mjcm\SweetNT.crx [2014-06-24]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirSchedulerService; D:\Avira\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; D:\Avira\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; D:\Avira\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-16] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_43E460C0; D:\Program Files (x86)\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-25] (CyberLink)
S2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-17] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
S2 MBAMScheduler; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-17] (NVIDIA Corporation)
S2 PMBDeviceInfoProvider; D:\SONYPlayMemoriesHome\PMBDeviceInfoProvider.exe [485400 2014-10-03] (Sony Corporation)
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-01-25] ()
S2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [174656 2006-11-02] () [File not signed]
S2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-09-24] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-09-24] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-02] (Avira Operations GmbH & Co. KG)
S2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-09-24] (Avira Operations GmbH & Co. KG)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-07-18] (Glarysoft Ltd)
R0 FSProFilter; C:\Windows\System32\Drivers\FSPFltd.sys [54848 2010-07-22] (FSPro Labs)
S1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2014-11-04] (Glarysoft Ltd)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-10] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [204568 2013-08-20] (DEVGURU Co., LTD.(www.devguru.co.kr))

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 11:03 - 2015-02-10 11:03 - 02132992 _____ (Farbar) C:\Users\Patrick\Desktop\FRST64.exe
2015-02-10 11:03 - 2015-02-10 11:03 - 00014967 _____ () C:\Users\Patrick\Desktop\FRST.txt
2015-02-10 11:03 - 2015-02-10 11:03 - 00000000 ____D () C:\FRST
2015-02-10 11:01 - 2015-02-10 11:01 - 00000476 _____ () C:\Users\Patrick\Desktop\defogger_disable.log
2015-02-10 11:01 - 2015-02-10 11:01 - 00000000 _____ () C:\Users\Patrick\defogger_reenable
2015-02-10 10:55 - 2015-02-10 10:59 - 00050477 _____ () C:\Users\Patrick\Desktop\Defogger.exe
2015-02-10 10:09 - 2015-02-10 10:09 - 00051442 _____ () C:\Windows\PFRO.log
2015-02-10 09:53 - 2015-02-10 10:28 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-10 09:53 - 2015-02-10 09:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-10 09:53 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-10 09:53 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-10 09:51 - 2015-02-09 19:36 - 02112512 _____ () C:\Users\Patrick\Desktop\AdwCleaner_4.110.exe
2015-02-09 15:44 - 2015-02-10 10:47 - 00001008 _____ () C:\Windows\setupact.log
2015-02-09 15:44 - 2015-02-09 15:44 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-08 15:54 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-02-08 15:54 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-02-08 15:54 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-08 15:54 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-08 15:54 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-08 15:54 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-08 15:54 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-08 15:54 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-08 15:54 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-08 15:54 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-02-08 15:54 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-02-08 15:54 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-02-08 15:54 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-02-08 15:45 - 2015-02-10 10:08 - 00099000 _____ () C:\Windows\WindowsUpdate.log
2015-02-03 19:05 - 2015-02-03 19:05 - 00000000 ____D () C:\Users\Patrick\Desktop\USB Stick Inhalt
2015-01-31 01:24 - 2015-01-31 01:24 - 00000000 ____D () C:\Program Files (x86)\Canon
2015-01-16 23:17 - 2015-01-16 23:17 - 00000000 __SHD () C:\Users\Patrick\AppData\Local\EmieBrowserModeList
2015-01-12 20:25 - 2015-01-12 20:25 - 1612083408 _____ () C:\Users\Patrick\Documents\CyberLinkMediaSuite12.0_Trial_MES140430-02_TR140711-013.tmp
2015-01-12 20:24 - 2015-01-12 20:24 - 00000612 _____ () C:\Users\Patrick\Desktop\CyberLink_Media_Suite_v12.0.lnk
2015-01-12 19:08 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-12 19:08 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-12 19:04 - 2015-01-12 19:04 - 00000000 ____D () C:\Windows\system32\appraiser
2015-01-12 18:40 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-01-12 18:40 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-01-12 18:40 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-01-12 18:40 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-01-12 18:40 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-01-12 18:40 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-01-12 18:40 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-01-12 18:40 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-01-12 18:40 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-01-12 18:40 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-01-12 18:39 - 2015-01-12 18:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2015-01-12 18:39 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-01-12 18:39 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-01-12 18:38 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-12 18:38 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-12 18:38 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-12 18:38 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-12 18:38 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-12 18:38 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-12 18:38 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-12 18:38 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-12 18:38 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-12 18:38 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-12 18:38 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-12 18:38 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-12 18:38 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-12 18:38 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-12 18:38 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-12 18:38 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-12 18:38 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-01-12 18:38 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-12 18:38 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-12 18:38 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-01-12 18:38 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-12 18:38 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-12 18:38 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-12 18:38 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-12 18:38 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-12 18:38 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-12 18:38 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-12 18:38 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-12 18:38 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-12 18:38 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-12 18:38 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-12 18:38 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-12 18:38 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-12 18:38 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-12 18:38 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-12 18:38 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-01-12 18:38 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-12 18:38 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-12 18:38 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-12 18:38 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-12 18:38 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-12 18:38 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-12 18:38 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-12 18:38 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-12 18:38 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-12 18:38 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-12 18:38 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-12 18:38 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-01-12 18:38 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-12 18:38 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-12 18:38 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-12 18:38 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-12 18:38 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-12 18:38 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-12 18:38 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-12 18:38 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-01-12 18:38 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-01-12 18:38 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-01-12 18:38 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-01-12 18:38 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-01-12 18:38 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-01-12 18:38 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-01-12 18:38 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-01-12 18:38 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-01-12 18:38 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-01-12 18:38 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-01-12 18:38 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-01-12 18:38 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-01-12 18:38 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-01-12 18:38 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-01-12 18:38 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-01-12 18:38 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-01-12 18:38 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-01-12 18:38 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-01-12 18:38 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2015-01-12 18:38 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-01-12 18:38 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-01-12 18:38 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-01-12 18:38 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-01-12 18:38 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-01-12 18:37 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-01-12 18:37 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-01-12 18:37 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-01-12 18:37 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-01-12 18:37 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-01-12 18:37 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-01-12 18:37 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-01-12 18:37 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-01-12 18:37 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-12 18:37 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-01-12 18:37 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-01-12 18:37 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-01-12 18:37 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-01-12 18:37 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-01-12 18:37 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-01-12 18:37 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-01-12 18:37 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-01-12 18:37 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-01-12 18:37 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-12 18:37 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-01-12 18:37 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-01-12 18:37 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-01-12 18:37 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-12 18:37 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-01-12 18:37 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-01-12 18:37 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-01-12 18:37 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-01-12 18:37 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-01-12 18:37 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-01-12 18:37 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-01-12 18:37 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-01-12 18:37 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-01-12 18:37 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-01-12 18:37 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-01-12 18:37 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-01-12 18:37 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-01-12 18:37 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-01-12 18:37 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2015-01-12 18:37 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2015-01-12 18:37 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-01-12 18:37 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2015-01-12 18:37 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-01-12 18:36 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-01-12 18:36 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-01-12 18:36 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-01-12 18:36 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-12 18:36 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-12 18:36 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-12 18:36 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-12 18:36 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-12 18:36 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-12 18:36 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-12 18:36 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-12 18:36 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-12 18:36 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-01-12 18:36 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-01-12 18:36 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-01-12 18:36 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-01-12 18:36 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-01-12 18:36 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-01-12 18:36 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-01-12 18:36 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-01-12 18:36 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-01-12 18:36 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2015-01-12 18:35 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-01-12 18:35 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-01-12 18:35 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-12 18:35 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-01-12 18:35 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-01-12 18:35 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-01-12 18:35 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-01-12 18:35 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-01-12 18:31 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-01-12 18:31 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-01-12 18:31 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-01-12 18:31 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-01-12 18:31 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-01-12 18:31 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-01-12 18:31 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-01-12 18:31 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-01-12 18:31 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-01-12 18:31 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-01-12 18:31 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-01-12 18:31 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-01-12 18:31 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-01-12 18:31 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 11:01 - 2011-11-28 19:33 - 00000000 ____D () C:\Users\Patrick
2015-02-10 10:53 - 2011-08-16 16:43 - 01622300 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-10 10:53 - 2011-08-16 16:43 - 00699884 _____ () C:\Windows\system32\perfh007.dat
2015-02-10 10:53 - 2011-08-16 16:43 - 00149766 _____ () C:\Windows\system32\perfc007.dat
2015-02-10 10:47 - 2014-09-20 17:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-10 10:47 - 2014-06-12 17:19 - 00000298 _____ () C:\Windows\Tasks\GlaryInitialize 5.job
2015-02-10 10:47 - 2011-08-16 16:41 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-10 10:02 - 2013-01-30 13:47 - 00000000 ____D () C:\Windows\SysWOW64\ARFC
2015-02-10 10:02 - 2013-01-27 21:10 - 00000000 ____D () C:\Windows\SysWOW64\WNLT
2015-02-10 09:53 - 2013-01-26 15:37 - 00000785 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-10 09:53 - 2013-01-26 15:37 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-10 09:50 - 2011-08-16 16:43 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-10 09:50 - 2011-08-16 16:43 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-10 09:49 - 2013-11-11 18:23 - 00000332 _____ () C:\Windows\lgfwup.ini
2015-02-10 01:42 - 2012-07-28 11:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-09 15:53 - 2011-11-28 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A41FA24F-3E3D-4045-A89D-1F6E7675A484}
2015-02-08 15:58 - 2012-03-04 11:14 - 01595644 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-08 15:57 - 2013-10-20 23:10 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-08 15:54 - 2011-08-16 16:43 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-08 15:44 - 2012-07-28 11:11 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-08 15:44 - 2012-07-28 11:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-08 15:44 - 2011-08-17 17:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-03 17:42 - 2014-06-12 17:19 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\DiskDefrag
2015-01-31 13:47 - 2012-11-29 17:30 - 00000000 ____D () C:\Users\Patrick\Documents\Flight Simulator X-Dateien
2015-01-31 13:37 - 2011-08-16 16:49 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-01-31 01:13 - 2011-08-16 16:44 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-01-30 19:14 - 2012-02-09 22:31 - 00001477 _____ () C:\Users\Patrick\AppData\Local\RecConfig.xml
2015-01-12 20:24 - 2011-08-17 17:05 - 00000000 ____D () C:\ProgramData\CyberLink
2015-01-12 20:00 - 2014-06-12 17:19 - 00002948 _____ () C:\Windows\System32\Tasks\GU5SkipUAC
2015-01-12 20:00 - 2014-06-12 17:19 - 00002610 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5
2015-01-12 20:00 - 2014-06-12 17:19 - 00000599 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk
2015-01-12 20:00 - 2014-06-12 17:19 - 00000599 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2015-01-12 19:05 - 2011-08-16 16:43 - 00433592 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-12 19:04 - 2014-06-01 18:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-12 19:04 - 2011-08-16 16:49 - 00000000 ____D () C:\Windows\AppCompat
2015-01-12 19:04 - 2011-08-16 16:47 - 00000000 ____D () C:\Windows\PolicyDefinitions

==================== Files in the root of some directories =======

2014-09-09 21:47 - 2014-09-09 21:53 - 0039936 ___SH () C:\Users\Patrick\AppData\Roaming\Thumbs.db
2012-01-04 21:44 - 2012-01-04 21:44 - 0031344 _____ () C:\Users\Patrick\AppData\Roaming\UserTile.png
2006-12-11 19:13 - 2006-12-11 19:13 - 0097336 _____ (Un4seen Developments) C:\Users\Patrick\AppData\Local\bass.dll
2006-12-11 19:13 - 2006-12-11 19:13 - 0013872 _____ (Un4seen Developments) C:\Users\Patrick\AppData\Local\basscd.dll
2007-08-13 17:46 - 2007-08-13 17:46 - 0102912 _____ (Albert L Faber) C:\Users\Patrick\AppData\Local\CDRip.dll
2007-08-13 17:46 - 2007-08-13 17:46 - 0155136 _____ () C:\Users\Patrick\AppData\Local\lame_enc.dll
2007-01-18 21:09 - 2007-01-18 21:09 - 0623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\Patrick\AppData\Local\No23 Recorder.exe
2005-08-23 22:34 - 2005-08-23 22:34 - 0029184 _____ () C:\Users\Patrick\AppData\Local\no23xwrapper.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0015872 _____ () C:\Users\Patrick\AppData\Local\ogg.dll
2012-02-09 22:31 - 2015-01-30 19:14 - 0001477 _____ () C:\Users\Patrick\AppData\Local\RecConfig.xml
2012-09-14 19:06 - 2012-09-14 19:06 - 0000017 _____ () C:\Users\Patrick\AppData\Local\resmon.resmoncfg
2006-10-26 01:06 - 2006-10-26 01:06 - 0143872 _____ () C:\Users\Patrick\AppData\Local\vorbis.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0064000 _____ () C:\Users\Patrick\AppData\Local\vorbisenc.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 0019456 _____ () C:\Users\Patrick\AppData\Local\vorbisfile.dll

Some content of TEMP:
====================
C:\Users\Patrick\AppData\Local\Temp\avgnt.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-02-03 18:12

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-02-2015
Ran by Patrick at 2015-02-10 11:04:10
Running from C:\Users\Patrick\Desktop
Boot Mode: Safe Mode (with Networking)
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acoustica Effects Pack (HKLM-x32\...\Acoustica Effects Pack) (Version: 3.0 - Acoustica, Inc)
Acoustica Mixcraft 5 (HKLM-x32\...\Acoustica Mixcraft 5) (Version: - Acoustica)
Acoustica Mixcraft 6 (HKLM-x32\...\Acoustica Mixcraft 6) (Version: b210 - Acoustica)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
AeroFly Professional Deluxe (HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\{8B3E5A90-1F6E-4FAF-B84F-C306C8A80809}) (Version: 1.11.0701 - IPACS)
AeroFly Professional Deluxe AddOn 3 (True Scale AddOn) (HKLM-x32\...\{4F5EBA69-57B4-484D-B60D-DD95981031A0}) (Version: 1.11.0705 - IPACS)
AeroFly Professional Deluxe AddOn 4 (Team Edition 1) (HKLM-x32\...\{780FAA54-2FA0-4CF4-A9C8-AE50C8B469C9}) (Version: 1.11.0707 - IPACS)
AeroFly Professional Deluxe AddOn 5 (HKLM-x32\...\{FC1B8354-2CEB-4799-B38C-13A78A7985A8}) (Version: 1.11.0719 - IPACS)
Age of Empires III - The WarChiefs (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
ANNO 1503 GOLD (HKLM-x32\...\{DB833EF9-A198-49BE-970A-BD46F30BFBB4}) (Version: 1.05.00 - )
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
Any Media Converter (HKLM-x32\...\Any Media Converter) (Version: 1.14 - Any Media Converter)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
Assassin's Creed(R) III v1.06 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.06 - Ubisoft)
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Cars (HKLM-x32\...\76322c23820ae7473cdebbff3eceb262) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Converter version 0.1 (HKLM-x32\...\Converter_is1) (Version: 0.1 - )
Corel Paint Shop Pro X (HKLM-x32\...\{1A15507A-8551-4626-915D-3D5FA095CC1B}) (Version: 10.10 - Corel Inc)
CyberLink BD_3D Advisor 2.0 (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.5425 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
CyberLink PowerProducer 5.5 (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.5.3.4118 - CyberLink Corp.)
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.4125 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
DiRT 3 (HKLM-x32\...\GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}) (Version: 1.0.0000.130 - Codemasters)
DiRT 3 (x32 Version: 1.0.0000.130 - Codemasters) Hidden
DiRT 3 (x32 Version: 1.0.0003.130 - Codemasters) Hidden
DiRT Showdown (HKLM-x32\...\Steam App 201700) (Version: - Codemasters)
DiRT2 (HKLM-x32\...\{52D1D62C-FEAB-4580-849E-1DB624BADBBD}) (Version: 1.00.0000 - Codemasters)
DiRT2 (x32 Version: 1.0.0002.133 - Codemasters) Hidden
dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
EA Download Manager (HKLM-x32\...\EADM) (Version: 5.0.0.288 - Electronic Arts, Inc.)
Erazer Control Center (HKLM-x32\...\Erazer Control Center_is1) (Version: 1.0.1.0 - Medion AG)
FIFA 11 (HKLM-x32\...\{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}) (Version: 1.0.0.0 - Electronic Arts)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Flight Simulator X (HKLM-x32\...\RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: - )
Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: - )
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.4.24.0 - International GeoGebra Institute)
Glary Undelete 1.8.0.468 (HKLM-x32\...\Glary Undelete_is1) (Version: - Glarysoft.com)
Glary Utilities 5.16 (HKLM-x32\...\Glary Utilities 5) (Version: 5.16.0.29 - Glarysoft Ltd)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LEGO® Star Wars™: Die Komplette Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)
LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden
LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{C2201486-48D3-4457-9EF3-C2B75ED4EFA4}) (Version: 7.0.2.6 - MAGIX Software GmbH)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2014 Premium (Designelemente) (HKLM-x32\...\MX.{53BBE66D-C843-4E0A-A317-2F0B8FA29485}) (Version: 1.0.1.0 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Designelemente) (Version: 1.0.1.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (Filmvorlagen) (HKLM-x32\...\MX.{BD329C68-4F9A-4ACD-A2D0-D6D59380E6E7}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Filmvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.0.30 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Menüvorlagen 1) (HKLM-x32\...\MX.{17BCC3D6-6414-482F-8EE3-1C3324604198}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Menüvorlagen 1) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (NewBlueFX ColorFast) (HKLM-x32\...\MX.{D9D24F5F-1E36-48BE-9419-CF97B34AB063}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (NewBlueFX ColorFast) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (proDAD Heroglyph 4.0) (HKLM-x32\...\MX.{CFD52E6D-2AF5-495C-87E3-4D243FE202E7}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (proDAD Heroglyph 4.0) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (Titeleffekte) (HKLM-x32\...\MX.{D958ED91-0308-404E-9455-F7EE9BAAC70C}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Titeleffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (Überblendeffekte) (HKLM-x32\...\MX.{3B812D22-B8EC-4060-B909-FF822FE7612B}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Überblendeffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (Version: 13.0.0.30 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium (Video Plugins) (HKLM-x32\...\MX.{9DB10630-ECF3-4829-90E9-B32729BD11D4}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video deluxe 2014 Premium (Video Plugins) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium Update (Version: 13.0.4.4 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 Premium Update (Version: 13.0.5.4 - MAGIX AG) Hidden
MAGIX Video deluxe 2015 Premium (HKLM\...\MX.{D23C4A4D-F83B-4B7E-B72A-91C41A04833E}) (Version: 14.0.0.140 - MAGIX Software GmbH)
MAGIX Video deluxe 2015 Premium (Version: 14.0.0.140 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2015 Premium Update (Version: 14.0.0.153 - MAGIX AG) Hidden
MAGIX Video deluxe 2015 Premium Update (Version: 14.0.0.162 - MAGIX AG) Hidden
MAGIX Video deluxe Premium 2014 Update (Version: 13.0.1.4 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MergeModule_x64 (Version: 9.0.00 - Sony Corporation) Hidden
MergeModule_x86 (x32 Version: 9.0.00 - Sony Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: 10.0.61637.0 - Microsoft Game Studios)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Mouse driver (HKLM-x32\...\Inno Tilt) (Version: - )
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
My Lockbox 2.9.9 (HKLM\...\My Lockbox_is1) (Version: 2.9.9 - )
Need For Speed Hot Pursuit 2 (HKLM-x32\...\{76F4DD9B-C246-4BE0-00B6-3DE9ABF72299}) (Version: - )
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
NewBlue ColorFast for Magix (HKLM-x32\...\NewBlue ColorFast for Magix) (Version: 1.4 - NewBlue)
No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
PHOTOfunSTUDIO 6.1 HD Lite Edition (HKLM-x32\...\{7E653036-DE31-4BFD-96BB-421CC72E06FC}) (Version: 6.01.015 - Panasonic Corporation)
PlayMemories Home (HKLM-x32\...\{93AA5B49-0994-4EF6-80F3-868C9CEA88ED}) (Version: 4.0.02.10030 - Sony Corporation)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PMB_ModeEditor (x32 Version: 9.0.02 - Sony Corporation) Hidden
PMB_ServiceUploader (x32 Version: 9.0.02 - Sony Corporation) Hidden
Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6368 - Realtek Semiconductor Corp.)
Red Giant Universe Chromatic Glow for Magix 1.0.0 (HKLM\...\{9BAF1E0A-8F6A-41D5-A8E1-C9EED3CF9D2D}_is1) (Version: 1.0.0 - Red Giant, LLC)
Red Giant Universe Knoll Light Factory for Magix 1.0.0 (HKLM\...\{E9015311-83B3-4E7A-8B2D-9324ABD604ED}_is1) (Version: 1.0.0 - Red Giant, LLC)
Red Giant Universe RetroGrade for Magix 1.0.0 (HKLM\...\{4FB52568-FF9D-4E9B-BB44-5A13C418376C}_is1) (Version: 1.0.0 - Red Giant, LLC)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
SOHLib for PlayMemories Home (Version: 1.0.3.02170 - Sony Corporation) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Tom Clancy's H.A.W.X (HKLM-x32\...\{6E36A172-06FB-4BC8-B7FC-D30D219E6776}) (Version: 1.02.00000 - Ubisoft)
T-Online 6.0 (HKLM-x32\...\{B1275E23-717A-4D52-997A-1AD1E24BC7F3}) (Version: - )
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
USBFast (HKLM-x32\...\{AED142A8-96EA-42DE-B212-60BFC98D6CC7}) (Version: 1.3.0.30 - Prolific Technology Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
watchmi (HKLM-x32\...\{AA4D1C5E-116A-4FF4-AA91-28F526868203}) (Version: 2.5.0 - Axel Springer Digital TV Guide GmbH)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points =========================

09-02-2015 17:31:33 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2011-08-16 16:46 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {163B4A90-E20F-4571-A787-8903E652E22F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {16A04197-838A-47B1-BAF7-E95CECCBD2FB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)
Task: {19B83537-CA8B-4648-9CF2-D7ADC2E320EC} - System32\Tasks\Browser Manager => Sc.exe start Browser Manager
Task: {44E1165C-BA37-48FD-97DF-CE8DCAF21939} - System32\Tasks\GU5SkipUAC => D:\Glary Utilities 5\Integrator.exe [2015-01-05] (Glarysoft Ltd)
Task: {45D9E920-1A35-42AD-81D9-340976688446} - System32\Tasks\{1503B000-C9F0-43BB-AF2E-15AD0696C0DC} => D:\DiRT Showdown\Steam.exe [2014-11-18] (Valve Corporation)
Task: {586CD30D-F266-4D14-AA86-67CFCA96CBD8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {734AF429-36FF-4E8E-B083-8118748375E9} - System32\Tasks\GlaryInitialize 5 => D:\Glary Utilities 5\Initialize.exe [2015-01-05] (Glarysoft Ltd)
Task: {79961944-FEBF-4FE2-B4AF-54A1EF82B879} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {82B244A1-1F55-4EA1-866D-03BD1DA5BA87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-08] (Adobe Systems Incorporated)
Task: {89F17E8F-C33E-40F6-AB1B-944D3F2E3388} - System32\Tasks\{AEE0FA71-C1EF-4B2A-9F9A-A36DB82D5A7D} => pcalua.exe -a C:\Users\Patrick\Desktop\IVSASetup.exe -d C:\Users\Patrick\Desktop
Task: {9074A0A5-2D09-4E44-8B20-9ED166F5BD63} - System32\Tasks\YourFile Update => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATTENTION
Task: {A30A3004-E1CA-4257-87FD-7B61774AB721} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {B4DC16A8-9AA9-44F0-962C-71136F84776F} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {BCD010C0-8A25-44D4-975C-170868037B8D} - System32\Tasks\{1DECA5BE-97C5-463E-81FB-55A36F9F654D} => D:\DiRT Showdown\Steam.exe [2014-11-18] (Valve Corporation)
Task: {CDAF4C75-EC4F-40C8-99B8-C89B95990A56} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2014-01-16] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 5.job => D:\Glary Utilities 5\Initialize.exe

==================== Loaded Modules (whitelisted) ==============

2011-11-29 21:50 - 2005-07-20 13:34 - 00700497 ____N () D:\T-Online_Software_6\Notifier\libcurl.dll
2011-11-29 21:50 - 2004-04-16 16:45 - 00143360 ____N () D:\T-Online_Software_6\Notifier\libexpat.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Patrick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: EA Core => "D:\Need for Speed SHIFT\EADM\Core.exe" -silent
MSCONFIG\startupreg: Steam => "D:\DiRT Showdown\Steam.exe" -silent

==================== Accounts: =============================

Administrator (S-1-5-21-297262102-3710466809-3807349961-500 - Administrator - Disabled)
Gast (S-1-5-21-297262102-3710466809-3807349961-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-297262102-3710466809-3807349961-1002 - Limited - Enabled)
Patrick (S-1-5-21-297262102-3710466809-3807349961-1001 - Administrator - Enabled) => C:\Users\Patrick

==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:
==================
Error: (02/10/2015 10:50:51 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:42:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:38:12 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:29:41 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:21:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:15:13 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:14:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.OE.Systray.exe, Version: 1.1.27.25537, Zeitstempel: 0x546de872
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0x608
Startzeit der fehlerhaften Anwendung: 0xAvira.OE.Systray.exe0
Pfad der fehlerhaften Anwendung: Avira.OE.Systray.exe1
Pfad des fehlerhaften Moduls: Avira.OE.Systray.exe2
Berichtskennung: Avira.OE.Systray.exe3

Error: (02/10/2015 10:14:30 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.Systray.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Net.Sockets.SocketException
Stack:
at System.Net.SafeCloseSocketAndEvent.CreateWSASocketWithEvent(System.Net.Sockets.AddressFamily, System.Net.Sockets.SocketType, System.Net.Sockets.ProtocolType, Boolean, Boolean)
at System.Net.NetworkInformation.NetworkChange+AddressChangeListener.StartHelper(System.Net.NetworkInformation.NetworkAddressChangedEventHandler, Boolean, System.Net.NetworkInformation.StartIPOptions)
at Avira.OE.WinCore.NetworkStatusListener..ctor()
at Avira.OE.WinCore.InternetConnectionMonitor..ctor()
at Avira.OE.Systray.SystrayIcon..ctor(Avira.OE.WinCore.Interface.IServiceStatusMonitor, Avira.OE.Communicator.Interface.ICommunicatorClientProxy, Avira.OE.MiniGui.IMiniGuiWindow, Avira.OE.WinCore.Interface.IProcessController)
at Avira.OE.Systray.SystrayIcon..ctor()
at Avira.OE.Systray.Program.Main(System.String[])

Error: (02/10/2015 10:11:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 09:44:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:
=============
Error: (02/10/2015 11:04:15 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Data" den Befehl "chkdsk" aus.

Error: (02/10/2015 11:03:26 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (02/10/2015 11:03:26 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (02/10/2015 11:03:26 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (02/10/2015 11:02:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (02/10/2015 11:02:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (02/10/2015 11:02:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (02/10/2015 11:02:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (02/10/2015 11:02:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (02/10/2015 11:02:47 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Microsoft Office Sessions:
=========================
Error: (02/10/2015 10:50:51 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:42:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:38:12 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:29:41 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:21:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:15:13 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 10:14:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Avira.OE.Systray.exe1.1.27.25537546de872KERNELBASE.dll6.1.7601.1840953159a86e04343520000c42d60801d04511f96d75c6C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exeC:\Windows\syswow64\KERNELBASE.dll408a155c-b105-11e4-a0be-b927b1911c71

Error: (02/10/2015 10:14:30 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.Systray.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Net.Sockets.SocketException
Stack:
at System.Net.SafeCloseSocketAndEvent.CreateWSASocketWithEvent(System.Net.Sockets.AddressFamily, System.Net.Sockets.SocketType, System.Net.Sockets.ProtocolType, Boolean, Boolean)
at System.Net.NetworkInformation.NetworkChange+AddressChangeListener.StartHelper(System.Net.NetworkInformation.NetworkAddressChangedEventHandler, Boolean, System.Net.NetworkInformation.StartIPOptions)
at Avira.OE.WinCore.NetworkStatusListener..ctor()
at Avira.OE.WinCore.InternetConnectionMonitor..ctor()
at Avira.OE.Systray.SystrayIcon..ctor(Avira.OE.WinCore.Interface.IServiceStatusMonitor, Avira.OE.Communicator.Interface.ICommunicatorClientProxy, Avira.OE.MiniGui.IMiniGuiWindow, Avira.OE.WinCore.Interface.IProcessController)
at Avira.OE.Systray.SystrayIcon..ctor()
at Avira.OE.Systray.Program.Main(System.String[])

Error: (02/10/2015 10:11:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/10/2015 09:44:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Percentage of memory in use: 12%
Total physical RAM: 8173.7 MB
Available physical RAM: 7130.53 MB
Total Pagefile: 16345.57 MB
Available Pagefile: 15362.92 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:58.52 GB) (Free:5.56 GB) NTFS
Drive d: (Data) (Fixed) (Total:881 GB) (Free:214.86 GB) NTFS
Drive e: (Recover) (Fixed) (Total:50.51 GB) (Free:28.77 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 59.6 GB) (Disk ID: 59BAD0E3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=58.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=1 GB) - (Type=12)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 091DBCCD)
Partition 1: (Not Active) - (Size=881 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=50.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Hi und :hallo:

bitte alle Logs von Malwarebytes in CODE-Tags posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Hallo,

leider funktioniert die code-Funktion nicht in meinem Editor. Wenn ich darauf clicke, passiert gar nichts? Daher anbei die txt.Version des malwarbyteslogs:

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 10.02.2015
Suchlauf-Zeit: 09:54:04
Logdatei: MalwarebyteProtokolla.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.02.10.06
Rootkit Datenbank: v2015.02.03.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Patrick

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 378362
Verstrichene Zeit: 7 Min, 5 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 49
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr.1, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.IncredibarHlpr, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.IncredibarHlpr.1, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.dskBnd.1, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.dskBnd, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.dskBnd, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.dskBnd.1, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729],
PUP.Optional.Incredibar, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729],
PUP.Optional.Incredibar, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729],
PUP.Optional.FileConverter.A, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{78e516ef-11de-47a1-8364-a99b917ec5ee}, In Quarantäne, [eee067b59ceebf772ea52ad6976cba46],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\IB Updater, In Quarantäne, [f0de33e96426be78c3ef0eb131d20df3],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\SweetIM, In Quarantäne, [3995cf4d2a60cc6a7aba820e27dcf907],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\CLASSES\esrv.IncredibarESrvc, In Quarantäne, [20ae20fccac04fe74a78cff2ae55f30d],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\CLASSES\esrv.IncredibarESrvc.1, In Quarantäne, [874750cc6d1d62d4675b853cbf4427d9],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, In Quarantäne, [12bc25f7abdf2a0c4d64665916ed1ae6],
PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\WNLT, In Quarantäne, [4589110bc9c1fa3cdbfef5f9bc48f40c],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\IB Updater, In Quarantäne, [cd01829ab4d6290de0d2f3cce32048b8],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\Incredibar.com, In Quarantäne, [1eb08f8db5d5063017b227814cb716ea],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SweetIM, In Quarantäne, [1eb040dca0ea9e987bb98c0450b3f40c],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\WaIntEnhance, In Quarantäne, [d6f8b6662e5cbe788de03158768dc13f],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.IncredibarESrvc, In Quarantäne, [7f4f75a7018978be8f3331904eb5e31d],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.IncredibarESrvc.1, In Quarantäne, [f0deb9634149a5918939408123e0cb35],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, In Quarantäne, [517d45d795f552e46a476e5117ecdd23],
PUP.Optional.Perion.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\niogeckbkdcabhnapjbkeiklablhjoca, In Quarantäne, [606e2bf18cfed561a0067e1c0ef5f010],
PUP.Optional.SweetIM.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SweetIM, Löschen bei Neustart, [5b73a379e7a3f73f48ebd0c0b15202fe],
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, Löschen bei Neustart, [a52978a485055cda00d83eb062a2f40c],
PUP.Optional.Incredibar.A, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Incredibar.com, In Quarantäne, [8f3fd844cac0d16565652781d330bc44],
PUP.Optional.SweetIM.A, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SweetIM, In Quarantäne, [478732ea4a4086b0042f444c46bd966a],
PUP.Optional.Wajam.A, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WAJAM, In Quarantäne, [7b53001c008aa492a2872dbe0301ea16],
PUP.Optional.InstallBrain.A, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, In Quarantäne, [844aec30e6a49e98ab2d45a915ef6799],
PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WNLT, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\IncredibarApp.appCore.1, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\IncredibarApp.appCore, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IncredibarApp.appCore, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IncredibarApp.appCore.1, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\I, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\I, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\incredibar, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],

Registrierungswerte: 12
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F9639E4A-801B-4843-AEE3-03D9DA199E77}, Incredibar Toolbar, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729]
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, In Quarantäne, [2ba333e96a2082b4e855f04e1ee5649c],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, In Quarantäne, [4c82a9733a5000364bfbf40e38cb03fd],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, In Quarantäne, [4c82a9733a5000364bfbf40e38cb03fd]
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, In Quarantäne, [4c82a9733a5000364bfbf40e38cb03fd]
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, In Quarantäne, [7658f12b7b0f8aac57ef867c8b78aa56],
PUP.Optional.Incredibar, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, In Quarantäne, [b41add3fa3e73ef8102747acef1509f7]
PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\WNLT|PDV, [BLACKLIST=1] [CAPTURECHEXT=1], In Quarantäne, [4589110bc9c1fa3cdbfef5f9bc48f40c]
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, In Quarantäne, [f6d8001cc4c6ee48a592fdf643c17c84]
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, MYSTART, Löschen bei Neustart, [a52978a485055cda00d83eb062a2f40c]
PUP.Optional.Wajam.A, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WAJAM|affiliate_id, 6332, In Quarantäne, [7b53001c008aa492a2872dbe0301ea16]
PUP.Optional.InstallBrain.A, HKU\S-1-5-21-297262102-3710466809-3807349961-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, In Quarantäne, [844aec30e6a49e98ab2d45a915ef6799],

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 31
PUP.Optional.SweetIM.A, C:\Windows\SysWOW64\jmdp, In Quarantäne, [08c6150719711b1b65fa555cc340c43c],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\Uninstall, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\html, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\css, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\html, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\images, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\js, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\Plugins, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\LocalLow\Incredibar.com, In Quarantäne, [10be41dba5e53bfb2951115a976c8878],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\LocalLow\Incredibar.com\incredibar, In Quarantäne, [10be41dba5e53bfb2951115a976c8878],
PUP.Optional.Perion.A, C:\Program Files (x86)\Perion, In Quarantäne, [b81667b5800ae650e4a3c8aca75c13ed],
PUP.Optional.Perion.A, C:\Program Files (x86)\Perion\ChromeInfoBar, In Quarantäne, [b81667b5800ae650e4a3c8aca75c13ed],
PUP.Optional.Perion.A, C:\Program Files (x86)\Perion\NewTab, In Quarantäne, [b81667b5800ae650e4a3c8aca75c13ed],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Search, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Uninstall Wajam, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],

Dateien: 137
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll, In Quarantäne, [9f2fbf5d38523006f745d866937016ea],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll, In Quarantäne, [e8e6829a84060f275be25fdf21e2d729],
PUP.Optional.SweetIM.A, C:\Windows\SysWOW64\jmdp\SweetNT.crx, In Quarantäne, [08c6150719711b1b65fa555cc340c43c],
PUP.Optional.SweetIM.A, C:\Windows\SysWOW64\jmdp\ImHttpComm.dll, In Quarantäne, [08c6150719711b1b65fa555cc340c43c],
PUP.Optional.SweetIM.A, C:\Windows\SysWOW64\jmdp\lmrn.dll, In Quarantäne, [08c6150719711b1b65fa555cc340c43c],
PUP.Optional.SweetIM.A, C:\Windows\SysWOW64\jmdp\msvcp100.dll, In Quarantäne, [08c6150719711b1b65fa555cc340c43c],
PUP.Optional.SweetIM.A, C:\Windows\SysWOW64\jmdp\msvcr100.dll, In Quarantäne, [08c6150719711b1b65fa555cc340c43c],
PUP.Optional.SweetIM.A, C:\Windows\SysWOW64\jmdp\stij.exe, In Quarantäne, [08c6150719711b1b65fa555cc340c43c],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlnembnfbcpjnepmfjmngjenhhajpdfd_0.localstorage, In Quarantäne, [25a9180498f2a1952d83bd02e122f010],
PUP.Optional.Perion.A, C:\Windows\SysWOW64\ARFC\wrtc.exe, In Quarantäne, [c30b35e74149f442f7bda718cc3754ac],
PUP.Optional.BProtector.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data, In Quarantäne, [28a607153a50db5b6a9ae506b054f30d],
PUP.Optional.BProtector.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences, In Quarantäne, [963849d39febea4cca3ba348768e0af6],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\Config.bin, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\HSChromeRegSetup.exe, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\NTSetup.exe, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\SKSetup.exe, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\SWDS.bin, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\uninstaller.exe, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\WSSetup.exe, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\Uninstall\msvcp100.dll, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\Uninstall\msvcr100.dll, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\Uninstall\uninstaller.exe, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.InstallBrain.A, C:\Windows\SysWOW64\WNLT\Installation\Uninstall\UninstallerLauncher.exe, In Quarantäne, [f5d9e735d0ba082e3797be920cf716ea],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarApp.dll, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarEng.dll, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarsrv.exe, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\uninstall.exe, In Quarantäne, [5e7025f7ed9d84b28fd46ae77a893dc3],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\manifest.json, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\priam_icon_128x128.png, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\priam_icon_48x48.png, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\html\background.html, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\background.js, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam.js, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam_background.js, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam_chrome.js, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Wajam.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins\PriamNPAPI.dll, In Quarantäne, [85498d8fa3e72b0b96d3b39ff70c659b],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\16x16_gray.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\icon.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\manifest.json, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\css\infobar.css, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\html\infobar.html, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\images\fixieLogo.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\images\gamesLogo.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\images\gemLogo.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\images\ibLogo.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\images\incredimailLogo.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\images\magGlass.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\images\smileBoxLogo.png, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\js\background.js, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\js\infobar.js, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\js\injected.js, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\js\jquery-1.7.1.min.js, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Incredibar.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Extensions\niogeckbkdcabhnapjbkeiklablhjoca\1.0.5_0\Plugins\PerionChromeInfoBar-32.dll, In Quarantäne, [25a90814276342f42f6db2a909fac040],
PUP.Optional.Perion.A, C:\Program Files (x86)\Perion\ChromeInfoBar\ChromeInfoBar.crx, In Quarantäne, [b81667b5800ae650e4a3c8aca75c13ed],
PUP.Optional.Perion.A, C:\Program Files (x86)\Perion\ChromeInfoBar\data.txt, In Quarantäne, [b81667b5800ae650e4a3c8aca75c13ed],
PUP.Optional.Perion.A, C:\Program Files (x86)\Perion\NewTab\data.txt, In Quarantäne, [b81667b5800ae650e4a3c8aca75c13ed],
PUP.Optional.Perion.A, C:\Program Files (x86)\Perion\NewTab\NewTab.crx, In Quarantäne, [b81667b5800ae650e4a3c8aca75c13ed],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Settings.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\SignIn with Facebook.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\SignIn with Twitter.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Wajam Website.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Search\Ask.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Search\Google.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Search\IMDb.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Search\Shopping.com.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Search\TripAdvisor.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Search\Wikipedia.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Search\Yahoo!.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Amazon.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Argos.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Ebay.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Etsy.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\HomeDepot.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Ikea.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Lowe's.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Mercadolivre.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\MyShopping.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Sears.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Target.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Tesco.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Walmart.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Explore Social Shopping\Zalando.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaIntEnhance\Uninstall Wajam\uninstall.lnk, In Quarantäne, [7559d844f397bb7bfd589becbd467987],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\uninstall.exe, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\amazon.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\argos.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\ask.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\bestbuy.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\ebay.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\etsy.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\facebook.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\favicon.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\google.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\homedepot.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\ikea.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\imdb.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\lowes.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\mercado.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\mysearchweb.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\myshopping.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\searchresult.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\sears.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\setting.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\settings.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\shopping.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\target.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\tesco.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\tripadvisor.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\twitter.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\wajam.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\walmart.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\wiki.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\yahoo.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\Logos\zalando.ico, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\0bbe0f7fca7a091f277f63e2ef308126, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\142491539eebc781966db6c803d5d73c, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\23c0f3cec6dd41ad74fe0987c83b93db, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\5b670487ab99709972c43a2cc11199c2, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\6d5633efb63014a1ef75984d40362a07, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\804e890578126f23fdb0ffb66b1a31bc, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\a2877855e321546c2bb5a63ce18ea0ae, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\ApiHandlr.dll, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\e0cf6031a3ea43e1d1ca1cf284b0f99e, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\e36168f0f3afc2188c97ad3aab364282, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\ed703cb23d31c06e2fb1a25e8e8ba39b, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\eeabbf7716a9e045015b29de1ce75200, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\f5ef4b3039baa44aa01552b61f9aab70, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\f85dad7eb09037f10d56e6a34a7e1534, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\fd6b5fc2dd93cfcec16d18f48a3156f9, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\FiddlerCore.dll, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\HtmlAgilityPack.dll, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\makecert.exe, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\Newtonsoft.Json.dll, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\WHttpServer.exe, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\wie, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaIntEnhance\WaIntEnhance Internet Enhancer\WJManifest, In Quarantäne, [5d719c80cebc91a5e96db6d116ed5aa6],
PUP.Optional.Babylon.A, C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: ( "homepage": "hxxp://search.babylon.com/?affID=116775&tt=201112_ccp_ctrl_4712_4&babsrc=HP_ss&mntrId=8c0fe2270000000000006c626d462129",), Ersetzt,[b21c0b112b5f0f27faa6995c23e2f20e]

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)

(end)

Dann bitte die Tags selber schreiben...es folgt ein FRST-Fix, prüf bitte danach ob Windows wieder normal startet:

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

AppInit_DLLs-x32: c:\progra~3\browse~1\25976~1.107\{c16c1~1\mngr.dll => "c:\progra~3\browse~1\25976~1.107\{c16c1~1\mngr.dll" File Not Found

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:49266;https=127.0.0.1:49266

c:\progra~3\browse~1

EmptyTemp:

Hosts:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Hallo,
also der Neustart funktioniert wieder nicht normal, es kommt nach der Passwordeingabe erneut der blackscreen mit dem nur noch steuerbaren Mauszeiger. Ich warte jetzt schon 5 min, nicht passiert. Sollte man denn evtl. länger warten?
Mit freundlichen Gruß und herzlichen Dank für die Hilfe

BB

Du hast das Ergebnis des FRST-Fixes auch nicht gepostet...

Hallo,
habe leider gerade bemerkt, dass im abgesicherten Modus mein Antivir nicht zu aktivieren ist und mir wurde aktuell auch noch gemeldet, ich hätte meine firewall deaktiviert, was laut Windows-Systemsteuerung aber nicht der Fall ist. Letztlich habe ich unter zwar den roten Regenschirm von Antivir geöffnet bekommen, beim Starten des Hauptprogramms wird mir aber weiterhin gemeldet, ich wäre nicht geschützt.
Anbei aber ersteinmal die Log datei:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-02-2015
Ran by Patrick at 2015-02-10 13:18:56 Run:1
Running from C:\Users\Patrick\Desktop
Loaded Profiles: Patrick (Available profiles: Patrick)
Boot Mode: Safe Mode (with Networking)
==============================================

Content of fixlist:
*****************
AppInit_DLLs-x32: c:\progra~3\browse~1\25976~1.107\{c16c1~1\mngr.dll => "c:\progra~3\browse~1\25976~1.107\{c16c1~1\mngr.dll" File Not Found
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:49266;https=127.0.0.1:49266
c:\progra~3\browse~1
EmptyTemp:
Hosts:
*****************

"c:\progra~3\browse~1\25976~1.107\{c16c1~1\mngr.dll" => Value Data removed successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
"c:\progra~3\browse~1" => File/Directory not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 214.2 MB temporary data.

The system needed a reboot.

==== End of Fixlog 13:19:07 ====

Vergiss Avira im abgesicherten Modus...das ist völlig irrelevant, abgesehen davon empfehlen wir kein Avira mehr...

Der FIx lief jedenfalls sauber durch. Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken

http://saved.im/mtg0mjy4yjlu/2014-04...ryscantool.png

das aktuelle FRST Ergebnis

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-02-2015

Ran by Patrick at 2015-02-10 13:43:51

Running from C:\Users\Patrick\Desktop

Boot Mode: Safe Mode (with Networking)

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acoustica Effects Pack (HKLM-x32\...\Acoustica Effects Pack) (Version: 3.0 - Acoustica, Inc)

Acoustica Mixcraft 5 (HKLM-x32\...\Acoustica Mixcraft 5) (Version:  - Acoustica)

Acoustica Mixcraft 6 (HKLM-x32\...\Acoustica Mixcraft 6) (Version: b210 - Acoustica)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)

AeroFly Professional Deluxe (HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\{8B3E5A90-1F6E-4FAF-B84F-C306C8A80809}) (Version: 1.11.0701 - IPACS)

AeroFly Professional Deluxe AddOn 3 (True Scale AddOn) (HKLM-x32\...\{4F5EBA69-57B4-484D-B60D-DD95981031A0}) (Version: 1.11.0705 - IPACS)

AeroFly Professional Deluxe AddOn 4 (Team Edition 1) (HKLM-x32\...\{780FAA54-2FA0-4CF4-A9C8-AE50C8B469C9}) (Version: 1.11.0707 - IPACS)

AeroFly Professional Deluxe AddOn 5 (HKLM-x32\...\{FC1B8354-2CEB-4799-B38C-13A78A7985A8}) (Version: 1.11.0719 - IPACS)

Age of Empires III - The WarChiefs (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden

ANNO 1503 GOLD (HKLM-x32\...\{DB833EF9-A198-49BE-970A-BD46F30BFBB4}) (Version: 1.05.00 - )

ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)

Any Media Converter (HKLM-x32\...\Any Media Converter) (Version: 1.14 - Any Media Converter)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft)

Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)

Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)

Assassin's Creed(R) III v1.06 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.06 - Ubisoft)

Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)

Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

Cars (HKLM-x32\...\76322c23820ae7473cdebbff3eceb262) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)

Converter version 0.1 (HKLM-x32\...\Converter_is1) (Version: 0.1 - )

Corel Paint Shop Pro X (HKLM-x32\...\{1A15507A-8551-4626-915D-3D5FA095CC1B}) (Version: 10.10 - Corel Inc)

CyberLink BD_3D Advisor 2.0 (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.5425 - CyberLink Corp.)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

CyberLink PowerProducer 5.5 (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.5.3.4118 - CyberLink Corp.)

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.4125 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)

DiRT 3 (HKLM-x32\...\GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}) (Version: 1.0.0000.130 - Codemasters)

DiRT 3 (x32 Version: 1.0.0000.130 - Codemasters) Hidden

DiRT 3 (x32 Version: 1.0.0003.130 - Codemasters) Hidden

DiRT Showdown (HKLM-x32\...\Steam App 201700) (Version:  - Codemasters)

DiRT2 (HKLM-x32\...\{52D1D62C-FEAB-4580-849E-1DB624BADBBD}) (Version: 1.00.0000 - Codemasters)

DiRT2 (x32 Version: 1.0.0002.133 - Codemasters) Hidden

dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)

EA Download Manager (HKLM-x32\...\EADM) (Version: 5.0.0.288 - Electronic Arts, Inc.)

Erazer Control Center (HKLM-x32\...\Erazer Control Center_is1) (Version: 1.0.1.0 - Medion AG)

FIFA 11 (HKLM-x32\...\{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}) (Version: 1.0.0.0 - Electronic Arts)

Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)

Flight Simulator X (HKLM-x32\...\RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version:  - )

Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version:  - )

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )

GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.4.24.0 - International GeoGebra Institute)

Glary Undelete 1.8.0.468 (HKLM-x32\...\Glary Undelete_is1) (Version:  - Glarysoft.com)

Glary Utilities 5.16 (HKLM-x32\...\Glary Utilities 5) (Version: 5.16.0.29 - Glarysoft Ltd)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

LEGO® Star Wars™: Die Komplette Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)

LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden

LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )

Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)

MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{C2201486-48D3-4457-9EF3-C2B75ED4EFA4}) (Version: 7.0.2.6 - MAGIX Software GmbH)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden

MAGIX Video deluxe 2014 Premium (Designelemente) (HKLM-x32\...\MX.{53BBE66D-C843-4E0A-A317-2F0B8FA29485}) (Version: 1.0.1.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Designelemente) (Version: 1.0.1.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Filmvorlagen) (HKLM-x32\...\MX.{BD329C68-4F9A-4ACD-A2D0-D6D59380E6E7}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Filmvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.0.30 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Menüvorlagen 1) (HKLM-x32\...\MX.{17BCC3D6-6414-482F-8EE3-1C3324604198}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Menüvorlagen 1) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (NewBlueFX ColorFast) (HKLM-x32\...\MX.{D9D24F5F-1E36-48BE-9419-CF97B34AB063}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (NewBlueFX ColorFast) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (proDAD Heroglyph 4.0) (HKLM-x32\...\MX.{CFD52E6D-2AF5-495C-87E3-4D243FE202E7}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (proDAD Heroglyph 4.0) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Titeleffekte) (HKLM-x32\...\MX.{D958ED91-0308-404E-9455-F7EE9BAAC70C}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Titeleffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Überblendeffekte) (HKLM-x32\...\MX.{3B812D22-B8EC-4060-B909-FF822FE7612B}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Überblendeffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Version: 13.0.0.30 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Video Plugins) (HKLM-x32\...\MX.{9DB10630-ECF3-4829-90E9-B32729BD11D4}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Video Plugins) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium Update (Version: 13.0.4.4 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium Update (Version: 13.0.5.4 - MAGIX AG) Hidden

MAGIX Video deluxe 2015 Premium (HKLM\...\MX.{D23C4A4D-F83B-4B7E-B72A-91C41A04833E}) (Version: 14.0.0.140 - MAGIX Software GmbH)

MAGIX Video deluxe 2015 Premium (Version: 14.0.0.140 - MAGIX Software GmbH) Hidden

MAGIX Video deluxe 2015 Premium Update (Version: 14.0.0.153 - MAGIX AG) Hidden

MAGIX Video deluxe 2015 Premium Update (Version: 14.0.0.162 - MAGIX AG) Hidden

MAGIX Video deluxe Premium 2014 Update (Version: 13.0.1.4 - MAGIX AG) Hidden

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MergeModule_x64 (Version: 9.0.00 - Sony Corporation) Hidden

MergeModule_x86 (x32 Version: 9.0.00 - Sony Corporation) Hidden

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: 10.0.61637.0 - Microsoft Game Studios)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)

Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Mouse driver (HKLM-x32\...\Inno Tilt) (Version:  - )

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

My Lockbox 2.9.9 (HKLM\...\My Lockbox_is1) (Version: 2.9.9 - )

Need For Speed Hot Pursuit 2 (HKLM-x32\...\{76F4DD9B-C246-4BE0-00B6-3DE9ABF72299}) (Version:  - )

NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)

NewBlue ColorFast for Magix (HKLM-x32\...\NewBlue ColorFast for Magix) (Version: 1.4 - NewBlue)

No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)

Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )

NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)

NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)

PHOTOfunSTUDIO 6.1 HD Lite Edition (HKLM-x32\...\{7E653036-DE31-4BFD-96BB-421CC72E06FC}) (Version: 6.01.015 - Panasonic Corporation)

PlayMemories Home (HKLM-x32\...\{93AA5B49-0994-4EF6-80F3-868C9CEA88ED}) (Version: 4.0.02.10030 - Sony Corporation)

PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)

PMB_ModeEditor (x32 Version: 9.0.02 - Sony Corporation) Hidden

PMB_ServiceUploader (x32 Version: 9.0.02 - Sony Corporation) Hidden

Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6368 - Realtek Semiconductor Corp.)

Red Giant Universe Chromatic Glow for Magix 1.0.0 (HKLM\...\{9BAF1E0A-8F6A-41D5-A8E1-C9EED3CF9D2D}_is1) (Version: 1.0.0 - Red Giant, LLC)

Red Giant Universe Knoll Light Factory for Magix 1.0.0 (HKLM\...\{E9015311-83B3-4E7A-8B2D-9324ABD604ED}_is1) (Version: 1.0.0 - Red Giant, LLC)

Red Giant Universe RetroGrade for Magix 1.0.0 (HKLM\...\{4FB52568-FF9D-4E9B-BB44-5A13C418376C}_is1) (Version: 1.0.0 - Red Giant, LLC)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden

SOHLib for PlayMemories Home (Version: 1.0.3.02170 - Sony Corporation) Hidden

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Tom Clancy's H.A.W.X (HKLM-x32\...\{6E36A172-06FB-4BC8-B7FC-D30D219E6776}) (Version: 1.02.00000 - Ubisoft)

T-Online 6.0 (HKLM-x32\...\{B1275E23-717A-4D52-997A-1AD1E24BC7F3}) (Version:  - )

Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)

USBFast (HKLM-x32\...\{AED142A8-96EA-42DE-B212-60BFC98D6CC7}) (Version: 1.3.0.30 - Prolific Technology Inc.)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

watchmi (HKLM-x32\...\{AA4D1C5E-116A-4FF4-AA91-28F526868203}) (Version: 2.5.0 - Axel Springer Digital TV Guide GmbH)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

09-02-2015 17:31:33 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2011-08-16 16:46 - 2015-02-10 13:18 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {163B4A90-E20F-4571-A787-8903E652E22F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {16A04197-838A-47B1-BAF7-E95CECCBD2FB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)

Task: {19B83537-CA8B-4648-9CF2-D7ADC2E320EC} - System32\Tasks\Browser Manager => Sc.exe start Browser Manager

Task: {44E1165C-BA37-48FD-97DF-CE8DCAF21939} - System32\Tasks\GU5SkipUAC => D:\Glary Utilities 5\Integrator.exe [2015-01-05] (Glarysoft Ltd)

Task: {45D9E920-1A35-42AD-81D9-340976688446} - System32\Tasks\{1503B000-C9F0-43BB-AF2E-15AD0696C0DC} => D:\DiRT Showdown\Steam.exe [2014-11-18] (Valve Corporation)

Task: {586CD30D-F266-4D14-AA86-67CFCA96CBD8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {734AF429-36FF-4E8E-B083-8118748375E9} - System32\Tasks\GlaryInitialize 5 => D:\Glary Utilities 5\Initialize.exe [2015-01-05] (Glarysoft Ltd)

Task: {79961944-FEBF-4FE2-B4AF-54A1EF82B879} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

Task: {82B244A1-1F55-4EA1-866D-03BD1DA5BA87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-08] (Adobe Systems Incorporated)

Task: {89F17E8F-C33E-40F6-AB1B-944D3F2E3388} - System32\Tasks\{AEE0FA71-C1EF-4B2A-9F9A-A36DB82D5A7D} => pcalua.exe -a C:\Users\Patrick\Desktop\IVSASetup.exe -d C:\Users\Patrick\Desktop

Task: {9074A0A5-2D09-4E44-8B20-9ED166F5BD63} - System32\Tasks\YourFile Update => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATTENTION

Task: {A30A3004-E1CA-4257-87FD-7B61774AB721} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {B4DC16A8-9AA9-44F0-962C-71136F84776F} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {BCD010C0-8A25-44D4-975C-170868037B8D} - System32\Tasks\{1DECA5BE-97C5-463E-81FB-55A36F9F654D} => D:\DiRT Showdown\Steam.exe [2014-11-18] (Valve Corporation)

Task: {CDAF4C75-EC4F-40C8-99B8-C89B95990A56} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2014-01-16] (Sony Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GlaryInitialize 5.job => D:\Glary Utilities 5\Initialize.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2011-11-29 21:50 - 2005-07-20 13:34 - 00700497 ____N () D:\T-Online_Software_6\Notifier\libcurl.dll

2011-11-29 21:50 - 2004-04-16 16:45 - 00143360 ____N () D:\T-Online_Software_6\Notifier\libexpat.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Registry Areas =====================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^Users^Patrick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup

MSCONFIG\startupreg: EA Core => "D:\Need for Speed SHIFT\EADM\Core.exe" -silent

MSCONFIG\startupreg: Steam => "D:\DiRT Showdown\Steam.exe" -silent
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-297262102-3710466809-3807349961-500 - Administrator - Disabled)

Gast (S-1-5-21-297262102-3710466809-3807349961-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-297262102-3710466809-3807349961-1002 - Limited - Enabled)

Patrick (S-1-5-21-297262102-3710466809-3807349961-1001 - Administrator - Enabled) => C:\Users\Patrick
 

==================== Faulty Device Manager Devices =============
 

Name: Security Processor Loader Driver

Description: Security Processor Loader Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: spldr

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/10/2015 01:28:31 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 01:23:41 PM) (Source: CVHSVC) (EventID: 100) (User: )

Description: Nur zur Information.

(Stream product id=0x0066): Streaming Failed
 

Error: (02/10/2015 01:22:13 PM) (Source: CVHSVC) (EventID: 100) (User: )

Description: Nur zur Information.

Too many failures while downloading ranges: 2
 

Error: (02/10/2015 01:22:12 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:50:51 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:42:08 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:38:12 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:29:41 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:21:11 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:15:13 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (02/10/2015 01:43:56 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Data" den Befehl "chkdsk" aus.
 

Error: (02/10/2015 01:43:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/10/2015 01:43:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/10/2015 01:43:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/10/2015 01:43:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/10/2015 01:43:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/10/2015 01:43:26 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/10/2015 01:43:14 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/10/2015 01:43:14 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 

Error: (02/10/2015 01:43:14 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1068
 
 

Microsoft Office Sessions:

=========================

Error: (02/10/2015 01:28:31 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 01:23:41 PM) (Source: CVHSVC) (EventID: 100) (User: )

Description: (Stream product id=0x0066): Streaming Failed
 

Error: (02/10/2015 01:22:13 PM) (Source: CVHSVC) (EventID: 100) (User: )

Description: Too many failures while downloading ranges: 2
 

Error: (02/10/2015 01:22:12 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:50:51 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:42:08 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:38:12 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:29:41 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:21:11 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (02/10/2015 10:15:13 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz

Percentage of memory in use: 12%

Total physical RAM: 8173.7 MB

Available physical RAM: 7157.18 MB

Total Pagefile: 16345.57 MB

Available Pagefile: 15359.27 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: (Boot) (Fixed) (Total:58.52 GB) (Free:5.77 GB) NTFS

Drive d: (Data) (Fixed) (Total:881 GB) (Free:214.86 GB) NTFS

Drive e: (Recover) (Fixed) (Total:50.51 GB) (Free:28.77 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 59.6 GB) (Disk ID: 59BAD0E3)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=58.5 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=1 GB) - (Type=12)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 091DBCCD)

Partition 1: (Not Active) - (Size=881 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=50.5 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

Und die neue FRST.txt?

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015

Ran by Patrick (administrator) on PATRICK-ERAZER on 10-02-2015 13:43:30

Running from C:\Users\Patrick\Desktop

Loaded Profiles: Patrick (Available profiles: Patrick)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Browser)

Boot Mode: Safe Mode (with Networking)

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Deutsche Telekom AG) D:\T-Online_Software_6\Browser\browser.exe

(fun communications GmbH, hxxp://www.fun.de) D:\T-ONLI~1\Notifier\Notifier.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11821160 2011-05-09] (Realtek Semiconductor)

HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)

HKLM\...\Run: [mylbx] => D:\My Lockbox\My Lockbox\mylbx.exe [2584864 2013-07-06] (FSPro Labs)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)

HKLM-x32\...\Run: [Inno Tilt] => C:\Program Files (x86)\Mouse Driver\Tilt.exe [729088 2009-07-30] ()

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] => D:\Avira\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [RemoteControl10] => D:\Program Files (x86)\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)

HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink)

HKLM-x32\...\Run: [UpdatePPShortCut] => D:\Program Files (x86)\PowerProducer\MUITransfer\MUIStartMenu.exe [223096 2012-04-17] (CyberLink Corp.)

HKLM-x32\...\Run: [LGODDFU] => D:\Program Files (x86)\lgfw.exe [27760 2012-07-12] (Bitleader)

HKLM-x32\...\Run: [QuickTime Task] => D:\Quicktime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM-x32\...\Run: [PMBVolumeWatcher] => D:\SONYPlayMemoriesHome\PMBVolumeWatcher.exe [2711576 2014-10-03] (Sony Corporation)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2014-11-21] (Malwarebytes Corporation)

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\Run: [GUDelayStartup] => D:\Glary Utilities 5\StartupManager.exe [37152 2015-01-05] (Glarysoft Ltd)

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\MountPoints2: {17db9c87-f84f-11e3-b553-6c626d462129} - "G:\WD Drive Unlock.exe" autoplay=true

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk

ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{AA4D1C5E-116A-4FF4-AA91-28F526868203}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)

BootExecute: autocheck autochk *  BootDefrag.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://t-online.de/

SearchScopes: HKLM -> DefaultScope value is missing.

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> DefaultScope value is missing.

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {c1d89ae7-449d-4929-b24b-fded04adbe06} URL = hxxp://isearch.glarysoft.com/?q={searchTerms}&src=iesearch

SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6Oz52MP7G2&loc=skw&search={searchTerms}&i=26

SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> {0583AC13-165A-4DBF-858A-6B3B70556641} URL = hxxp://search.softonic.com/MON00015/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=914

SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> {924658B1-F216-41FC-9A21-5996B5B558B1} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3018509

SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> {c1d89ae7-449d-4929-b24b-fded04adbe06} URL = hxxp://isearch.glarysoft.com/?q={searchTerms}&src=iesearch

SearchScopes: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/?a=6Oz52MP7G2&loc=skw&search={searchTerms}&i=26

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Toolbar: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

DPF: HKLM-x32 {A8F2B9BD-A6A0-486A-9744-18920D898429} hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.15.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-297262102-3710466809-3807349961-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru

FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru

FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
 

Chrome: 

=======

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\gcswf32.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll No File

CHR Plugin: (Chrome NaCl) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll No File

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Profile: C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\SysWOW64\mjcm\SweetNT.crx [2014-06-24]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 AntiVirSchedulerService; D:\Avira\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; D:\Avira\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; D:\Avira\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-16] (Avira Operations GmbH & Co. KG)

S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)

S2 CLKMSVC10_43E460C0; D:\Program Files (x86)\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-25] (CyberLink)

S2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]

S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-17] (NVIDIA Corporation)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]

S2 MBAMScheduler; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

S2 MBAMService; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation)

S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-17] (NVIDIA Corporation)

S2 PMBDeviceInfoProvider; D:\SONYPlayMemoriesHome\PMBDeviceInfoProvider.exe [485400 2014-10-03] (Sony Corporation)

S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-01-25] ()

S2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [174656 2006-11-02] () [File not signed]

S2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] () [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-09-24] (Avira Operations GmbH & Co. KG)

S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-09-24] (Avira Operations GmbH & Co. KG)

S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-02] (Avira Operations GmbH & Co. KG)

S2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-09-24] (Avira Operations GmbH & Co. KG)

R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-07-18] (Glarysoft Ltd)

R0 FSProFilter; C:\Windows\System32\Drivers\FSPFltd.sys [54848 2010-07-22] (FSPro Labs)

S1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2014-11-04] (Glarysoft Ltd)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation)

S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)

S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [204568 2013-08-20] (DEVGURU Co., LTD.(www.devguru.co.kr))
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-10 11:25 - 2015-02-10 11:25 - 00003255 _____ () C:\Users\Patrick\Desktop\MalwarebyteProtokollb.txt

2015-02-10 11:24 - 2015-02-10 11:24 - 00038142 _____ () C:\Users\Patrick\Desktop\MalwarebyteProtokolla.txt

2015-02-10 11:11 - 2015-02-10 11:11 - 00000390 _____ () C:\Users\Patrick\Desktop\gmer.txt

2015-02-10 11:05 - 2015-02-10 11:05 - 00380416 _____ () C:\Users\Patrick\Desktop\Gmer-19357.exe

2015-02-10 11:04 - 2015-02-10 11:04 - 00039310 _____ () C:\Users\Patrick\Desktop\Addition.txt

2015-02-10 11:03 - 2015-02-10 13:43 - 00014729 _____ () C:\Users\Patrick\Desktop\FRST.txt

2015-02-10 11:03 - 2015-02-10 13:43 - 00000000 ____D () C:\FRST

2015-02-10 11:03 - 2015-02-10 11:03 - 02132992 _____ (Farbar) C:\Users\Patrick\Desktop\FRST64.exe

2015-02-10 11:01 - 2015-02-10 11:01 - 00000476 _____ () C:\Users\Patrick\Desktop\defogger_disable.log

2015-02-10 11:01 - 2015-02-10 11:01 - 00000000 _____ () C:\Users\Patrick\defogger_reenable

2015-02-10 10:55 - 2015-02-10 10:59 - 00050477 _____ () C:\Users\Patrick\Desktop\Defogger.exe

2015-02-10 10:09 - 2015-02-10 13:20 - 00053546 _____ () C:\Windows\PFRO.log

2015-02-10 09:53 - 2015-02-10 11:23 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-02-10 09:53 - 2015-02-10 09:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-02-10 09:53 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-02-10 09:53 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-02-10 09:51 - 2015-02-09 19:36 - 02112512 _____ () C:\Users\Patrick\Desktop\AdwCleaner_4.110.exe

2015-02-09 15:44 - 2015-02-10 13:20 - 00001176 _____ () C:\Windows\setupact.log

2015-02-09 15:44 - 2015-02-09 15:44 - 00000000 _____ () C:\Windows\setuperr.log

2015-02-08 15:54 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-02-08 15:54 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-02-08 15:54 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-02-08 15:54 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-02-08 15:54 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-02-08 15:54 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-02-08 15:54 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-02-08 15:54 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-02-08 15:54 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-02-08 15:54 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-02-08 15:54 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-02-08 15:54 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-02-08 15:54 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-02-08 15:45 - 2015-02-10 10:08 - 00099000 _____ () C:\Windows\WindowsUpdate.log

2015-02-03 19:05 - 2015-02-03 19:05 - 00000000 ____D () C:\Users\Patrick\Desktop\USB Stick Inhalt

2015-01-31 01:24 - 2015-01-31 01:24 - 00000000 ____D () C:\Program Files (x86)\Canon

2015-01-16 23:17 - 2015-01-16 23:17 - 00000000 __SHD () C:\Users\Patrick\AppData\Local\EmieBrowserModeList

2015-01-12 20:25 - 2015-01-12 20:25 - 1612083408 _____ () C:\Users\Patrick\Documents\CyberLinkMediaSuite12.0_Trial_MES140430-02_TR140711-013.tmp

2015-01-12 20:24 - 2015-01-12 20:24 - 00000612 _____ () C:\Users\Patrick\Desktop\CyberLink_Media_Suite_v12.0.lnk

2015-01-12 19:08 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-01-12 19:08 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-01-12 19:04 - 2015-01-12 19:04 - 00000000 ____D () C:\Windows\system32\appraiser

2015-01-12 18:40 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-01-12 18:40 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2015-01-12 18:40 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-01-12 18:40 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-01-12 18:40 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-01-12 18:40 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-01-12 18:40 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2015-01-12 18:40 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2015-01-12 18:40 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2015-01-12 18:40 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2015-01-12 18:39 - 2015-01-12 18:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET

2015-01-12 18:39 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2015-01-12 18:39 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2015-01-12 18:38 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-01-12 18:38 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-01-12 18:38 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-01-12 18:38 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-01-12 18:38 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-01-12 18:38 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-01-12 18:38 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-01-12 18:38 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-01-12 18:38 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-01-12 18:38 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-01-12 18:38 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-01-12 18:38 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-01-12 18:38 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-01-12 18:38 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-01-12 18:38 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-01-12 18:38 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-01-12 18:38 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-01-12 18:38 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-01-12 18:38 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-01-12 18:38 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-01-12 18:38 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-01-12 18:38 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-01-12 18:38 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-01-12 18:38 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-01-12 18:38 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-01-12 18:38 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-01-12 18:38 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-01-12 18:38 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-01-12 18:38 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-01-12 18:38 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-01-12 18:38 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-01-12 18:38 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-01-12 18:38 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-01-12 18:38 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-01-12 18:38 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-01-12 18:38 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-01-12 18:38 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-01-12 18:38 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-01-12 18:38 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-01-12 18:38 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-01-12 18:38 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-01-12 18:38 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-01-12 18:38 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-01-12 18:38 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-01-12 18:38 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-01-12 18:38 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-01-12 18:38 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-01-12 18:38 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-01-12 18:38 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-01-12 18:38 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-01-12 18:38 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-01-12 18:38 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-01-12 18:38 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-01-12 18:38 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-01-12 18:38 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-01-12 18:38 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2015-01-12 18:38 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-01-12 18:38 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2015-01-12 18:38 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-01-12 18:38 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2015-01-12 18:38 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-01-12 18:38 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-01-12 18:38 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-01-12 18:38 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-01-12 18:38 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-01-12 18:38 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-01-12 18:38 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-01-12 18:38 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2015-01-12 18:38 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2015-01-12 18:38 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-01-12 18:38 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2015-01-12 18:38 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2015-01-12 18:38 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll

2015-01-12 18:38 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2015-01-12 18:38 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll

2015-01-12 18:38 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-01-12 18:38 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2015-01-12 18:38 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2015-01-12 18:38 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2015-01-12 18:38 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2015-01-12 18:37 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-01-12 18:37 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-01-12 18:37 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-01-12 18:37 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-01-12 18:37 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-01-12 18:37 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-01-12 18:37 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-01-12 18:37 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2015-01-12 18:37 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll

2015-01-12 18:37 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2015-01-12 18:37 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll

2015-01-12 18:37 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2015-01-12 18:37 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2015-01-12 18:37 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll

2015-01-12 18:37 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll

2015-01-12 18:37 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll

2015-01-12 18:37 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

2015-01-12 18:37 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-01-12 18:37 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2015-01-12 18:37 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2015-01-12 18:36 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2015-01-12 18:36 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe

2015-01-12 18:36 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe

2015-01-12 18:36 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-01-12 18:36 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-01-12 18:36 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-01-12 18:36 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-01-12 18:36 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-01-12 18:36 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-01-12 18:36 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-01-12 18:36 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-01-12 18:36 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-01-12 18:36 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-01-12 18:36 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2015-01-12 18:36 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2015-01-12 18:36 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2015-01-12 18:36 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-01-12 18:36 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-01-12 18:36 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-01-12 18:36 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-01-12 18:36 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2015-01-12 18:36 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2015-01-12 18:35 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2015-01-12 18:35 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2015-01-12 18:35 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-01-12 18:35 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-01-12 18:35 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-01-12 18:35 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-01-12 18:35 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-01-12 18:35 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-01-12 18:31 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-01-12 18:31 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-01-12 18:31 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-01-12 18:31 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-01-12 18:31 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-01-12 18:31 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-01-12 18:31 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-01-12 18:31 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-10 13:33 - 2011-08-16 16:43 - 01622300 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-02-10 13:33 - 2011-08-16 16:43 - 00699884 _____ () C:\Windows\system32\perfh007.dat

2015-02-10 13:33 - 2011-08-16 16:43 - 00149766 _____ () C:\Windows\system32\perfc007.dat

2015-02-10 13:21 - 2014-06-12 17:19 - 00000298 _____ () C:\Windows\Tasks\GlaryInitialize 5.job

2015-02-10 13:20 - 2014-09-20 17:02 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-02-10 13:20 - 2011-08-16 16:41 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-10 11:01 - 2011-11-28 19:33 - 00000000 ____D () C:\Users\Patrick

2015-02-10 10:02 - 2013-01-30 13:47 - 00000000 ____D () C:\Windows\SysWOW64\ARFC

2015-02-10 10:02 - 2013-01-27 21:10 - 00000000 ____D () C:\Windows\SysWOW64\WNLT

2015-02-10 09:53 - 2013-01-26 15:37 - 00000785 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-02-10 09:53 - 2013-01-26 15:37 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-02-10 09:50 - 2011-08-16 16:43 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-10 09:50 - 2011-08-16 16:43 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-10 09:49 - 2013-11-11 18:23 - 00000332 _____ () C:\Windows\lgfwup.ini

2015-02-10 01:42 - 2012-07-28 11:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-09 15:53 - 2011-11-28 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A41FA24F-3E3D-4045-A89D-1F6E7675A484}

2015-02-08 15:58 - 2012-03-04 11:14 - 01595644 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-02-08 15:57 - 2013-10-20 23:10 - 00000000 ____D () C:\Windows\system32\MRT

2015-02-08 15:54 - 2011-08-16 16:43 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-02-08 15:44 - 2012-07-28 11:11 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-02-08 15:44 - 2012-07-28 11:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-02-08 15:44 - 2011-08-17 17:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-02-03 17:42 - 2014-06-12 17:19 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\DiskDefrag

2015-01-31 13:47 - 2012-11-29 17:30 - 00000000 ____D () C:\Users\Patrick\Documents\Flight Simulator X-Dateien

2015-01-31 13:37 - 2011-08-16 16:49 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2015-01-31 01:13 - 2011-08-16 16:44 - 00000000 ____D () C:\Windows\system32\FxsTmp

2015-01-30 19:14 - 2012-02-09 22:31 - 00001477 _____ () C:\Users\Patrick\AppData\Local\RecConfig.xml

2015-01-12 20:24 - 2011-08-17 17:05 - 00000000 ____D () C:\ProgramData\CyberLink

2015-01-12 20:00 - 2014-06-12 17:19 - 00002948 _____ () C:\Windows\System32\Tasks\GU5SkipUAC

2015-01-12 20:00 - 2014-06-12 17:19 - 00002610 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5

2015-01-12 20:00 - 2014-06-12 17:19 - 00000599 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk

2015-01-12 20:00 - 2014-06-12 17:19 - 00000599 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk

2015-01-12 19:05 - 2011-08-16 16:43 - 00433592 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-01-12 19:04 - 2014-06-01 18:41 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-01-12 19:04 - 2011-08-16 16:49 - 00000000 ____D () C:\Windows\AppCompat

2015-01-12 19:04 - 2011-08-16 16:47 - 00000000 ____D () C:\Windows\PolicyDefinitions
 

==================== Files in the root of some directories =======
 

2014-09-09 21:47 - 2014-09-09 21:53 - 0039936 ___SH () C:\Users\Patrick\AppData\Roaming\Thumbs.db

2012-01-04 21:44 - 2012-01-04 21:44 - 0031344 _____ () C:\Users\Patrick\AppData\Roaming\UserTile.png

2006-12-11 19:13 - 2006-12-11 19:13 - 0097336 _____ (Un4seen Developments) C:\Users\Patrick\AppData\Local\bass.dll

2006-12-11 19:13 - 2006-12-11 19:13 - 0013872 _____ (Un4seen Developments) C:\Users\Patrick\AppData\Local\basscd.dll

2007-08-13 17:46 - 2007-08-13 17:46 - 0102912 _____ (Albert L Faber) C:\Users\Patrick\AppData\Local\CDRip.dll

2007-08-13 17:46 - 2007-08-13 17:46 - 0155136 _____ () C:\Users\Patrick\AppData\Local\lame_enc.dll

2007-01-18 21:09 - 2007-01-18 21:09 - 0623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\Patrick\AppData\Local\No23 Recorder.exe

2005-08-23 22:34 - 2005-08-23 22:34 - 0029184 _____ () C:\Users\Patrick\AppData\Local\no23xwrapper.dll

2006-10-26 01:06 - 2006-10-26 01:06 - 0015872 _____ () C:\Users\Patrick\AppData\Local\ogg.dll

2012-02-09 22:31 - 2015-01-30 19:14 - 0001477 _____ () C:\Users\Patrick\AppData\Local\RecConfig.xml

2012-09-14 19:06 - 2012-09-14 19:06 - 0000017 _____ () C:\Users\Patrick\AppData\Local\resmon.resmoncfg

2006-10-26 01:06 - 2006-10-26 01:06 - 0143872 _____ () C:\Users\Patrick\AppData\Local\vorbis.dll

2006-10-26 01:06 - 2006-10-26 01:06 - 0064000 _____ () C:\Users\Patrick\AppData\Local\vorbisenc.dll

2006-10-26 01:06 - 2006-10-26 01:06 - 0019456 _____ () C:\Users\Patrick\AppData\Local\vorbisfile.dll
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-02-03 18:12
 

==================== End Of Log ============================

--- --- ---

Ich seh da nur ein bisschen Adware. Aber nichts was so für das Problem verantwortlich ist.
Erstell dir mal einen neuen Benutzer in der Systemsteuerung mit Adminrechten, starte neu im normalen Modus und schau ob sich der neue Admin-User normalen anmelden kann.

Habe einen neues Konto mit Administratorrechten erzeugt und soeben wird der Desktop angeblich vorbereitet, dauert aber schon 2 min. Wie lange sollte ich denn warten, bis der Desktop erscheinen sollte? (Schreibe dies von meinem Zweit-PC)

Nach ca. 3 min ist jetzt ein hellblauer Hintergrund erschienen, statt vorher schwarz und wieder ist nur der weiße Mauszeiger zu sehen...
Es hat sich bis auf die Hintergrundfarbe also nichts geändert!

Vereinzelt sieht man kurz die Windows-Sanduhr neben dem weiterhin noch bewegbaren Mauszeiger, nach ca. 5 min hat die Bildschirmfarbe von blau nach schwarz gewechselt...

Kommtse mit dem Affengriff in den Taskmanager rein?

String alt Entf bringt nichts, escape bringt nichts.

Ich werde jetzt erneut im abgesicherten Modus mit Netzwerktreibern starten oder?

Ich stelle noch fest, dass nach einigen erneuten Minuten die Bildschirmfarbe von zwischenzeitlich blau jetzt wieder auf schwarz gewechselt hat..
Und es erscheint jetzt eine Box: Fehler beim Anzeigen der Sicherheits- und Herunterfahroptionen:
Während des Anmeldevorganges konnten durch Drücken von Strg+Alt+Entf keine Sicherheits- und Anmeldeoptionen angezeigt werden. Wenn das Betriebssystem nicht reagiert, drücken sie ESC, oder starten sie den Computer durch Drücken des Netzschalters neu.
-> Also Drücken von Escape führt nur wieder zu einen hellblauben Bildschirm...

Probier mal im abgesicherten Modus => http://www.trojaner-board.de/126216-...tml#post946713

Hilft das nicht, wüsste ich nur noch inplace upgrade oder komplette Neuinstallation von Windows

Ok der Checkdisk läuft jetzt, aber es wurde ja ein normaler Neustart automatisch erzwungen, was mache ich denn am Ende von Checkdisk, wenn ich dann evtl. wieder nach dem Passwort gefragt werde?

Es kam, wie es kommen musste, ich wurde zur Passworteingabe aufgefordert, daraufhin wieder der black-screen...

Wie gesagt, wenn das Reparaturtool nicht hilft, wüsste ich auch nur noch Neuinstallation als letztes Mittel...

Also das System File Check hat beschädigte Dateien gefunden und konnte einige nicht reparieren. Details finden sie der Datei "CBS.log" >windir\logs\cbs\cbs.log, z. B. "C:\windows\logs\cbs\cbs.log".

Bringt das was? Soll ich diese Datei mal einstellen?

Es ist eine Riesendatei von 817 KB!

Mit dem Log könnte ich so eh nicht viel anfangen...hat chkdsk denn was gebracht?

Nein, nachdem checkdisk ist ja automatisch wieder ein Neustart im normalen Modus erfolgt. Die Passwort-Eingabe mündete wieder in einen blackscreen. Derzeti läuft das Repair-Tool von Windows-Repair, wenn ich den Zeitbalken richtig deute, kann das ganze ja noch ca. 1 h dauern?
Mein Riesenproblem bei einer Windowsneuinstallation, sind dann meine installierten Programme auch weg? Ich habe auf Laufwerk C, einer SSD eigentlich nur Windows und ein paar sehr wichtige Einzelprogramme. Die Daten befinden sich auf D. Was passiert denn bei einer Recovery, die mir per F11 angeboten wird beim Neustart?

Jetzt ging es sehr schnell, windows repair ist fertig und macht jetzt einen Neustart
S

Logischerweise sind bei einer Neuinstallation bzw einem Recovery alle in der alten Windows-Installation installierten Programmen weg...die muss man natürlich alle neu installieren!

Wenn du wirklich auf ein funktionierendes System angewiesen bist weil du damit dein Geld verdienst, dann musst du dich regelmäßig um Backups kümmern.

Hier das log file von Windos repair

Tweaking.com - Windows Repair v2.11.0
--------------------------------------------------------------------------------

System Variables
--------------------------------------------------------------------------------
OS: Windows 7 Home Premium
OS Architecture: 64-bit
OS Version: 6.1.7601
OS Service Pack: Service Pack 1
Computer Name: PATRICK-ERAZER
Windows Drive: C:\
Windows Path: C:\Windows
Program Files: C:\Program Files
Program Files (x86): C:\Program Files (x86)
Current Profile: C:\Users\Patrick
Current Profile SID: S-1-5-21-297262102-3710466809-3807349961-1001
Current Profile Classes: S-1-5-21-297262102-3710466809-3807349961-1001_Classes
Profiles Location: C:\Users
Profiles Location 2: C:\Windows\ServiceProfiles
Local Settings AppData: C:\Users\Patrick\AppData\Local
--------------------------------------------------------------------------------

System Information
--------------------------------------------------------------------------------
System Up Time: 0 Days 00:14:05

Process Count: 25
Commit Total: 995,45 MB
Commit Limit: 15,96 GB
Commit Peak: 1,03 GB
Handle Count: 6599
Kernel Total: 557,54 MB
Kernel Paged: 367,22 MB
Kernel Non Paged: 190,32 MB
System Cache: 7,02 GB
Thread Count: 301
--------------------------------------------------------------------------------

Memory Before Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 7,98 GB
Memory Used: 1,10 GB(13,808%)
Memory Avail.: 6,88 GB
--------------------------------------------------------------------------------

Cleaning Memory Before Starting Repairs...

Memory After Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 7,98 GB
Memory Used: 893,90 MB(10,9363%)
Memory Avail.: 7,11 GB
--------------------------------------------------------------------------------

Starting Repairs...
Started at (10.02.2015 15:03:21)

Setting Any Missing 'InstallDate' From Uninstall Sections Before Running Repair...
Total Missing 'InstallDate' Fixed: 70

01 - Reset Registry Permissions 01/03
HKEY_CURRENT_USER & Sub Keys
Start (10.02.2015 15:03:22)

You can tell the repair is working as SetACL_32.exe or SetACL_64.exe will be running.

Running Repair Under Current User Account
Done (10.02.2015 15:03:28)

01 - Reset Registry Permissions 02/03
HKEY_LOCAL_MACHINE & Sub Keys
Start (10.02.2015 15:03:28)

You can tell the repair is working as SetACL_32.exe or SetACL_64.exe will be running.

Running Repair Under System Account
Done (10.02.2015 15:05:23)

01 - Reset Registry Permissions 03/03
HKEY_CLASSES_ROOT & Sub Keys
Start (10.02.2015 15:05:23)

You can tell the repair is working as SetACL_32.exe or SetACL_64.exe will be running.

Running Repair Under System Account
Done (10.02.2015 15:05:49)

03 - Reset Service Permissions
Start (10.02.2015 15:05:50)

You can tell the repair is working as SetACL_32.exe or SetACL_64.exe will be running.

Running Repair Under System Account
Done (10.02.2015 15:05:52)

04 - Register System Files
Start (10.02.2015 15:05:52)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:06:00)

05 - Repair WMI
Start (10.02.2015 15:06:00)

Starting Security Center So We Can Export The Security Info.

Exporting Antivirus Info...
Avira Desktop Exported.

Exporting AntiSpyware Info...
Avira Desktop Exported.
Windows Defender Exported.

Exporting 3rd Party Firewall Info...
No Firewall Products Reported.

Running Repair Under Current User Account
Done (10.02.2015 15:06:42)

06 - Repair Windows Firewall
Start (10.02.2015 15:06:42)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:07:10)

07 - Repair Internet Explorer
Start (10.02.2015 15:07:10)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:07:18)

08 - Repair MDAC/MS Jet
Start (10.02.2015 15:07:18)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:07:20)

09 - Repair Hosts File
Start (10.02.2015 15:07:20)
Running Repair Under System Account
Done (10.02.2015 15:07:21)

10 - Remove Policies Set By Infections
Start (10.02.2015 15:07:21)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:07:25)

11 - Repair Start Menu Icons Removed By Infections
Start (10.02.2015 15:07:25)
Running Repair Under System Account
Done (10.02.2015 15:07:26)

12 - Repair Icons
Start (10.02.2015 15:07:26)
Running Repair Under Current User Account
Done (10.02.2015 15:07:27)

13 - Repair Winsock & DNS Cache
Start (10.02.2015 15:07:27)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:07:42)

15 - Repair Proxy Settings
Start (10.02.2015 15:07:42)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:07:44)

17 - Repair Windows Updates
Start (10.02.2015 15:07:44)
Running Repair Under Current User Account
Running Repair Under System Account
Setting Windows Updates Files That Are In Use To Be Removed At Next Boot.
Done (10.02.2015 15:07:59)

18 - Repair CD/DVD Missing/Not Working
Start (10.02.2015 15:07:59)
iTunes not found, not applying UpperFilters iTunes Reg Key
Done (10.02.2015 15:07:59)

19 - Repair Volume Shadow Copy Service
Start (10.02.2015 15:07:59)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:16)

21 - Repair MSI (Windows Installer)
Start (10.02.2015 15:08:16)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:24)

23.01 - Repair bat Association
Start (10.02.2015 15:08:24)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:27)

23.02 - Repair cmd Association
Start (10.02.2015 15:08:27)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:29)

23.03 - Repair com Association
Start (10.02.2015 15:08:29)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:31)

23.04 - Repair Directory Association
Start (10.02.2015 15:08:31)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:33)

23.05 - Repair Drive Association
Start (10.02.2015 15:08:33)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:35)

23.06 - Repair exe Association
Start (10.02.2015 15:08:35)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:37)

23.07 - Repair Folder Association
Start (10.02.2015 15:08:37)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:39)

23.08 - Repair inf Association
Start (10.02.2015 15:08:39)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:42)

23.09 - Repair lnk (Shortcuts) Association
Start (10.02.2015 15:08:42)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:44)

23.10 - Repair msc Association
Start (10.02.2015 15:08:44)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:46)

23.11 - Repair reg Association
Start (10.02.2015 15:08:46)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:48)

23.12 - Repair scr Association
Start (10.02.2015 15:08:48)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:50)

24 - Repair Windows Safe Mode
Start (10.02.2015 15:08:50)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:52)

25 - Repair Print Spooler
Start (10.02.2015 15:08:52)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:54)

26 - Restore Important Windows Services
Start (10.02.2015 15:08:54)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:08:59)

27 - Set Windows Services To Default Startup
Start (10.02.2015 15:08:59)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:09:02)

Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1

Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1

Skipping Repair.
Repair is for Windows v6.2 (Windows 8 & Newer) or higher.
Current version: 6.1

31 - Repair Windows 'New' Submenu
Start (10.02.2015 15:09:02)
Running Repair Under Current User Account
Running Repair Under System Account
Done (10.02.2015 15:09:04)

Cleaning up empty logs...

All Selected Repairs Done.
Done at (10.02.2015 15:09:04)
Total Repair Time: 00:05:44

...YOU MUST RESTART YOUR SYSTEM...

Gibt es denn außer der Neuinstallation wirklich keinen anderen Weg?
Was hat malwarebytes denn gelöscht, dass man nicht anders einzeln wieder bekommen könnte bei diesen ca. 44 Dateien? Ist das den logfiles nicht zu entnehmen?
Eine Neuinstallation aller meiner Programme wäre ein Albtraum, inbesondere da ich meine Videobearbeitung damit durchführe.
Die Filme an sich sind regelmäßig gesichert, auch die Bilder und Musikdateien, aber die Projekte, die auf eine spezielle Orderverwaltung zurückgreifen, sind dann nicht mehr möglich.
Brauche ich eigentlich für eine Neuinstallation auch die Windowsseriennummer und wo finde ich die. Der Medion-Rechner wurde ja komplett geliefert.

Malwarebytes hat nur PUP gelöscht und ich habs so auch noch nicht erlebt, dass eine Kiste nach MBAM nicht mehr normal booten will.

Mit viel Glück hilft dir noch ein ältere Wiederherstellungspunkt.

Über die Systemsteuerung wird mir gemeldet, dass es keine Wiederherstellungspunkte auf dem Systemlaufwerk gäbe?

Das ist leider Pech...ich denke es läuft auf inplace upgrade oder komplette Neuinstallation hinaus...zuvor würde ich ein Image machen (mit drivesnapshot) und das auf ner externen Platte (oder meinetwegen auch auf deiner internen Datenplatte) speichern. So kannst du nix an Daten aus dem Dateisystem auf der SSD vergessen...

Hallo,
fand gerade in einem anderen Thread auf Trojanerboard von 2013" folgendes:

"ich habe ein großes Problem :-(
Ich habe den Malwarebytes ausgeführt und alle Funde gelöscht und jetzt startet der Laptop nicht mehr richtig.
Er startet bis zum aufbau des Bildschirms fast normal (nur das laden der Benutzereinstellungen dauert etwas länger als normal) und dann braucht er mindestens eine halbe Stunde bis Symbole auf dem Bildschirm zu sehen sind. Bitte helft mir.Ich kenne mich mit PCs fast überhaupt nicht aus und weiß jetzt nicht mehr weiter.
Systemwiederherstellung habe ich schon versucht aber es kommt nur eine Meldung ,dass es nicht geht und nichts verändert wurde.
... Ich hab bemerkt ,dass das Programm Malwarebytes Anti-Malware unten rechts in der Taskleiste zu sehen war und als ich es beendet hab und nochmal neu gestartet hab,startete der Laptop normal.
Also ich hoffe,dass es daran gelegen hat."

Sollte ich auch mal 30 min warten, ob dann vielleicht malwarebyte in der Taskleiste unten rechts steht? Da stand es meines Wissens ja auch mit einem Echtzeitschutz.
Habe jetzt noch einmal Malwarebytes im abgesicherten modus scannen lassen, hat nur ein PUP gefunden, habe ich in Quarantäne gestellt. Jetzt alle automatischen Aktualisierunge und Echtzeitschutzz deaktiviert. Mal sehen. Mache jetzt einen Neustart...

Glaub ich zwar nicht, aber probiers einfach aus. Autostart von Malwarebytes rausnehmen oder MBAM deinstallieren.

Es hat geklappt, meine Vermutung war richtig und der Thread von 2013 hat das Problem korrekt beschrieben.

Malwarebytes installiert automatisch einen Echtzeitschutz und es wird automatiscch beim Starten von Windows aktiviert. Dadurch kommt es beim Start anscheinend zu einer Schleifenbildung in der Abfrage, wodurch der Windowsstart extrem verzögert wird, möglicherweise auch durch die gleichzeitige Antivir-Installation, wobei dieses bei mir erst als letztes automatisiert gestartet wird.

In den erweiterten Einstellungen habe ich bis auf den Schutz bei Systemstart um 15 s verzögern alles deaktiviert, habe die automatisierte Planung deaktiviert, habe alle Aktualisierungen deaktiviert, habe einen Neustart gemacht und alles funktioniert wieder!!!

Malwarebytes war also schuld mit irgendeiner automatisierten Routine, die beim Start aufgerufen wurde!

Da sollte andere aber auch gewarnt werden!

Wie sollte ich denn jetzt weiter verfahren. Sicherheitshalber malwarebytes deinstallieren?
Welches Antivirusprogramm, möglichst kostenlos könnte Ihr denn aktuell empfehlen statt Antivir und ggf. mit welchem Antimalwareprogramm?

Schon komisch, das ist äußerst selten...hab das mal intern zur Diskussion gegeben...

Also nochmals vielen Dank für Ihre Zeit und Mühe, auch wenn die Lösung sich anders ergab. Da steckt man bei Windows nie drin.

Aber dennoch nochmals meine Nachfrage, was sollte ich denn statt Antivir nutzen bzw. welche Kombination? Deaktivierter defender, normale windows firewall und Antivir, wie ich es jetzt bisher seit Jahren hatte, scheinen ja nicht optimal zu sein.
Mit freundlichen Grüßen

BB

Wie sollte ich denn jetzt weiter verfahren. Sicherheitshalber Malwarebytes deinstallieren?
Welches Antivirusprogramm, möglichst kostenlos könnte Ihr denn aktuell empfehlen statt Antivir und ggf. mit welchem Antimalwareprogramm?

Wie sollte ich denn jetzt weiter verfahren. Sicherheitshalber Malwarebytes deinstallieren?
Welches Antivirusprogramm, möglichst kostenlos könnte Ihr denn aktuell empfehlen statt Antivir und ggf. mit welchem Antimalwareprogramm?

Also mit adwCleaner habe ich jetzt noch einige andere Malware komplikationslos entfernt.
Sollte ich zukünftig dies ab und zu mal drüber laufen lassen?

Wie sollte ich denn jetzt weiter verfahren. Sicherheitshalber Malwarebytes deinstallieren?
Welches Antivirusprogramm, möglichst kostenlos könnte Ihr denn aktuell empfehlen statt Antivir und ggf. mit welchem Antimalwareprogramm?

Wie gesagt sind solche Probleme extrem selten. Wir wissen derzeit nicht wo da genau die Ursache bzw das Problem bei MBAM liegt. Zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken

http://saved.im/mtg0mjy4yjlu/2014-04...ryscantool.png

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-02-2015

Ran by Patrick at 2015-02-11 13:16:37

Running from C:\Users\Patrick\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)

AeroFly Professional Deluxe (HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\{8B3E5A90-1F6E-4FAF-B84F-C306C8A80809}) (Version: 1.11.0701 - IPACS)

AeroFly Professional Deluxe AddOn 3 (True Scale AddOn) (HKLM-x32\...\{4F5EBA69-57B4-484D-B60D-DD95981031A0}) (Version: 1.11.0705 - IPACS)

AeroFly Professional Deluxe AddOn 4 (Team Edition 1) (HKLM-x32\...\{780FAA54-2FA0-4CF4-A9C8-AE50C8B469C9}) (Version: 1.11.0707 - IPACS)

AeroFly Professional Deluxe AddOn 5 (HKLM-x32\...\{FC1B8354-2CEB-4799-B38C-13A78A7985A8}) (Version: 1.11.0719 - IPACS)

Age of Empires III - The WarChiefs (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden

ANNO 1503 GOLD (HKLM-x32\...\{DB833EF9-A198-49BE-970A-BD46F30BFBB4}) (Version: 1.05.00 - )

ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)

Any Media Converter (HKLM-x32\...\Any Media Converter) (Version: 1.14 - Any Media Converter)

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft)

Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)

Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)

Assassin's Creed(R) III v1.06 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.06 - Ubisoft)

Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)

Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)

Cars (HKLM-x32\...\76322c23820ae7473cdebbff3eceb262) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)

Converter version 0.1 (HKLM-x32\...\Converter_is1) (Version: 0.1 - )

Corel Paint Shop Pro X (HKLM-x32\...\{1A15507A-8551-4626-915D-3D5FA095CC1B}) (Version: 10.10 - Corel Inc)

CyberLink BD_3D Advisor 2.0 (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.5425 - CyberLink Corp.)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

CyberLink PowerProducer 5.5 (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.5.3.4118 - CyberLink Corp.)

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.4125 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)

DiRT 3 (HKLM-x32\...\GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}) (Version: 1.0.0000.130 - Codemasters)

DiRT 3 (x32 Version: 1.0.0000.130 - Codemasters) Hidden

DiRT 3 (x32 Version: 1.0.0003.130 - Codemasters) Hidden

DiRT Showdown (HKLM-x32\...\Steam App 201700) (Version:  - Codemasters)

DiRT2 (HKLM-x32\...\{52D1D62C-FEAB-4580-849E-1DB624BADBBD}) (Version: 1.00.0000 - Codemasters)

DiRT2 (x32 Version: 1.0.0002.133 - Codemasters) Hidden

dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)

EA Download Manager (HKLM-x32\...\EADM) (Version: 5.0.0.288 - Electronic Arts, Inc.)

Erazer Control Center (HKLM-x32\...\Erazer Control Center_is1) (Version: 1.0.1.0 - Medion AG)

FIFA 11 (HKLM-x32\...\{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}) (Version: 1.0.0.0 - Electronic Arts)

Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)

Flight Simulator X (HKLM-x32\...\RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version:  - )

Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version:  - )

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )

GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.4.24.0 - International GeoGebra Institute)

Glary Undelete 1.8.0.468 (HKLM-x32\...\Glary Undelete_is1) (Version:  - Glarysoft.com)

Glary Utilities 5.16 (HKLM-x32\...\Glary Utilities 5) (Version: 5.16.0.29 - Glarysoft Ltd)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

LEGO® Star Wars™: Die Komplette Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)

LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden

LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )

Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)

MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{C2201486-48D3-4457-9EF3-C2B75ED4EFA4}) (Version: 7.0.2.6 - MAGIX Software GmbH)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden

MAGIX Video deluxe 2014 Premium (Designelemente) (HKLM-x32\...\MX.{53BBE66D-C843-4E0A-A317-2F0B8FA29485}) (Version: 1.0.1.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Designelemente) (Version: 1.0.1.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Filmvorlagen) (HKLM-x32\...\MX.{BD329C68-4F9A-4ACD-A2D0-D6D59380E6E7}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Filmvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (HKLM-x32\...\MX.{FBCA50BE-C022-45DA-9261-10230EC1012E}) (Version: 13.0.0.30 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Menüvorlagen 1) (HKLM-x32\...\MX.{17BCC3D6-6414-482F-8EE3-1C3324604198}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Menüvorlagen 1) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (NewBlueFX ColorFast) (HKLM-x32\...\MX.{D9D24F5F-1E36-48BE-9419-CF97B34AB063}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (NewBlueFX ColorFast) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (proDAD Heroglyph 4.0) (HKLM-x32\...\MX.{CFD52E6D-2AF5-495C-87E3-4D243FE202E7}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (proDAD Heroglyph 4.0) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Titeleffekte) (HKLM-x32\...\MX.{D958ED91-0308-404E-9455-F7EE9BAAC70C}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Titeleffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Überblendeffekte) (HKLM-x32\...\MX.{3B812D22-B8EC-4060-B909-FF822FE7612B}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Überblendeffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Version: 13.0.0.30 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium (Video Plugins) (HKLM-x32\...\MX.{9DB10630-ECF3-4829-90E9-B32729BD11D4}) (Version: 1.0.0.0 - MAGIX AG)

MAGIX Video deluxe 2014 Premium (Video Plugins) (Version: 1.0.0.0 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium Update (Version: 13.0.4.4 - MAGIX AG) Hidden

MAGIX Video deluxe 2014 Premium Update (Version: 13.0.5.4 - MAGIX AG) Hidden

MAGIX Video deluxe 2015 Premium (HKLM\...\MX.{D23C4A4D-F83B-4B7E-B72A-91C41A04833E}) (Version: 14.0.0.140 - MAGIX Software GmbH)

MAGIX Video deluxe 2015 Premium (Version: 14.0.0.140 - MAGIX Software GmbH) Hidden

MAGIX Video deluxe 2015 Premium Update (Version: 14.0.0.153 - MAGIX AG) Hidden

MAGIX Video deluxe 2015 Premium Update (Version: 14.0.0.162 - MAGIX AG) Hidden

MAGIX Video deluxe Premium 2014 Update (Version: 13.0.1.4 - MAGIX AG) Hidden

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MergeModule_x64 (Version: 9.0.00 - Sony Corporation) Hidden

MergeModule_x86 (x32 Version: 9.0.00 - Sony Corporation) Hidden

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: 10.0.61637.0 - Microsoft Game Studios)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)

Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)

Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Mouse driver (HKLM-x32\...\Inno Tilt) (Version:  - )

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

My Lockbox 2.9.9 (HKLM\...\My Lockbox_is1) (Version: 2.9.9 - )

Need For Speed Hot Pursuit 2 (HKLM-x32\...\{76F4DD9B-C246-4BE0-00B6-3DE9ABF72299}) (Version:  - )

NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)

NewBlue ColorFast for Magix (HKLM-x32\...\NewBlue ColorFast for Magix) (Version: 1.4 - NewBlue)

No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)

Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )

NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)

NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)

PHOTOfunSTUDIO 6.1 HD Lite Edition (HKLM-x32\...\{7E653036-DE31-4BFD-96BB-421CC72E06FC}) (Version: 6.01.015 - Panasonic Corporation)

PlayMemories Home (HKLM-x32\...\{93AA5B49-0994-4EF6-80F3-868C9CEA88ED}) (Version: 4.0.02.10030 - Sony Corporation)

PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)

PMB_ModeEditor (x32 Version: 9.0.02 - Sony Corporation) Hidden

PMB_ServiceUploader (x32 Version: 9.0.02 - Sony Corporation) Hidden

Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version:  - Blue Ripple Sound)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6368 - Realtek Semiconductor Corp.)

Red Giant Universe Chromatic Glow for Magix 1.0.0 (HKLM\...\{9BAF1E0A-8F6A-41D5-A8E1-C9EED3CF9D2D}_is1) (Version: 1.0.0 - Red Giant, LLC)

Red Giant Universe Knoll Light Factory for Magix 1.0.0 (HKLM\...\{E9015311-83B3-4E7A-8B2D-9324ABD604ED}_is1) (Version: 1.0.0 - Red Giant, LLC)

Red Giant Universe RetroGrade for Magix 1.0.0 (HKLM\...\{4FB52568-FF9D-4E9B-BB44-5A13C418376C}_is1) (Version: 1.0.0 - Red Giant, LLC)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.16.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0 - Renesas Electronics Corporation) Hidden

SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden

SOHLib for PlayMemories Home (Version: 1.0.3.02170 - Sony Corporation) Hidden

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Tom Clancy's H.A.W.X (HKLM-x32\...\{6E36A172-06FB-4BC8-B7FC-D30D219E6776}) (Version: 1.02.00000 - Ubisoft)

T-Online 6.0 (HKLM-x32\...\{B1275E23-717A-4D52-997A-1AD1E24BC7F3}) (Version:  - )

Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)

USBFast (HKLM-x32\...\{AED142A8-96EA-42DE-B212-60BFC98D6CC7}) (Version: 1.3.0.30 - Prolific Technology Inc.)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

watchmi (HKLM-x32\...\{AA4D1C5E-116A-4FF4-AA91-28F526868203}) (Version: 2.5.0 - Axel Springer Digital TV Guide GmbH)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-297262102-3710466809-3807349961-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)
 

==================== Restore Points  =========================
 

10-02-2015 17:53:32 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2011-08-16 16:46 - 2015-02-10 15:07 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {163B4A90-E20F-4571-A787-8903E652E22F} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {16A04197-838A-47B1-BAF7-E95CECCBD2FB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)

Task: {44E1165C-BA37-48FD-97DF-CE8DCAF21939} - System32\Tasks\GU5SkipUAC => D:\Glary Utilities 5\Integrator.exe [2015-01-05] (Glarysoft Ltd)

Task: {45D9E920-1A35-42AD-81D9-340976688446} - System32\Tasks\{1503B000-C9F0-43BB-AF2E-15AD0696C0DC} => D:\DiRT Showdown\Steam.exe [2014-11-18] (Valve Corporation)

Task: {586CD30D-F266-4D14-AA86-67CFCA96CBD8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {734AF429-36FF-4E8E-B083-8118748375E9} - System32\Tasks\GlaryInitialize 5 => D:\Glary Utilities 5\Initialize.exe [2015-01-05] (Glarysoft Ltd)

Task: {79961944-FEBF-4FE2-B4AF-54A1EF82B879} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

Task: {82B244A1-1F55-4EA1-866D-03BD1DA5BA87} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-08] (Adobe Systems Incorporated)

Task: {89F17E8F-C33E-40F6-AB1B-944D3F2E3388} - System32\Tasks\{AEE0FA71-C1EF-4B2A-9F9A-A36DB82D5A7D} => pcalua.exe -a C:\Users\Patrick\Desktop\IVSASetup.exe -d C:\Users\Patrick\Desktop

Task: {A30A3004-E1CA-4257-87FD-7B61774AB721} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {B4DC16A8-9AA9-44F0-962C-71136F84776F} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {BCD010C0-8A25-44D4-975C-170868037B8D} - System32\Tasks\{1DECA5BE-97C5-463E-81FB-55A36F9F654D} => D:\DiRT Showdown\Steam.exe [2014-11-18] (Valve Corporation)

Task: {CDAF4C75-EC4F-40C8-99B8-C89B95990A56} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2014-01-16] (Sony Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GlaryInitialize 5.job => D:\Glary Utilities 5\Initialize.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2014-09-20 17:02 - 2014-09-13 22:53 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2013-01-12 00:24 - 2015-02-10 19:32 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2006-11-02 20:40 - 2006-11-02 20:40 - 00174656 _____ () C:\Windows\SysWOW64\PSIService.exe

2010-12-06 12:52 - 2010-12-06 12:52 - 00062464 _____ () C:\Program Files (x86)\watchmi\TvdService.exe

2011-11-28 19:30 - 2011-11-28 19:30 - 00061952 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Remote\2.5.0.5__f722db7bec59a14b\Tvd.Remote.dll

2011-11-28 19:30 - 2011-11-28 19:30 - 00009216 _____ () C:\Windows\assembly\GAC_MSIL\FingerPrint\1.0.0.0__a62e68e935d72fa6\FingerPrint.dll

2011-11-28 19:30 - 2011-11-28 19:30 - 00078848 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Reporting\2.5.0.5__f722db7bec59a14b\Tvd.Reporting.dll

2011-11-28 19:30 - 2011-11-28 19:30 - 00148480 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Aprico\2.5.0.5__f722db7bec59a14b\Tvd.Aprico.dll

2009-07-30 10:29 - 2009-07-30 10:29 - 00729088 _____ () C:\Program Files (x86)\Mouse Driver\Tilt.exe

2010-12-06 12:52 - 2010-12-06 12:52 - 01070080 _____ () C:\Program Files (x86)\watchmi\TvdTray.exe

2010-12-06 12:52 - 2010-12-06 12:52 - 00004608 _____ () C:\Program Files (x86)\watchmi\de\TvdTray.resources.dll

2014-10-23 20:19 - 2014-10-23 20:19 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2013-07-29 12:05 - 2010-06-30 13:03 - 00051512 _____ () D:\My Lockbox\My Lockbox\fspflt.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Registry Areas =====================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Patrick\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^Users^Patrick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup

MSCONFIG\startupreg: EA Core => "D:\Need for Speed SHIFT\EADM\Core.exe" -silent

MSCONFIG\startupreg: QuickTime Task => "D:\Quicktime\QTTask.exe" -atboottime

MSCONFIG\startupreg: Steam => "D:\DiRT Showdown\Steam.exe" -silent
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-297262102-3710466809-3807349961-500 - Administrator - Disabled)

Gast (S-1-5-21-297262102-3710466809-3807349961-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-297262102-3710466809-3807349961-1002 - Limited - Enabled)

Patrick (S-1-5-21-297262102-3710466809-3807349961-1001 - Administrator - Enabled) => C:\Users\Patrick
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/10/2015 03:47:24 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
 

Error: (02/10/2015 03:47:24 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\TR-TR\MSFEEDS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\TR-TR\MSFEEDSBS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\SL-SI\MSFEEDSBS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\SL-SI\MSFEEDS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PT-PT\MSFEEDS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PT-PT\MSFEEDSBS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDSBS.MFL
 
 

System errors:

=============

Error: (02/11/2015 01:16:42 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Data" den Befehl "chkdsk" aus.
 

Error: (02/10/2015 06:35:06 PM) (Source: Tcpip) (EventID: 4199) (User: )

Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.1.4 mit dem Computer mit der

Netzwerkhardwareadresse 10-A5-D0-8F-DD-2E ermittelt. Netzwerkvorgänge könnten daher auf diesem

System unterbrochen werden.
 

Error: (02/10/2015 05:53:32 PM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Data" den Befehl "chkdsk" aus.
 

Error: (02/10/2015 05:18:40 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )

Description: Dienst "WMPNetworkSvc" konnte nicht ordnungsgemäß gestartet werden, da ein Fehler "0x80004005" in "CoCreateInstance(CLSID_UPnPDeviceFinder)" aufgetreten ist. Überprüfen Sie, ob der Dienst "UPnPHost" ausgeführt wird und ob die Windows-Komponente "UPnPHost" richtig installiert ist.
 

Error: (02/10/2015 04:36:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Application Virtualization Client" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (02/10/2015 04:36:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (02/10/2015 04:36:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "FABS - Helping agent for MAGIX media database" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (02/10/2015 04:36:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (02/10/2015 04:36:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "VAIO Entertainment Common Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (02/10/2015 04:36:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Sony Digital Media Server" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (02/10/2015 03:47:24 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
 

Error: (02/10/2015 03:47:24 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\TR-TR\MSFEEDS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\TR-TR\MSFEEDSBS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\SL-SI\MSFEEDSBS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\SL-SI\MSFEEDS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PT-PT\MSFEEDS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PT-PT\MSFEEDSBS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDS.MFL
 

Error: (02/10/2015 03:06:21 PM) (Source: WinMgmt) (EventID: 4) (User: )

Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\PL-PL\MSFEEDSBS.MFL
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz

Percentage of memory in use: 25%

Total physical RAM: 8173.7 MB

Available physical RAM: 6066.03 MB

Total Pagefile: 16345.57 MB

Available Pagefile: 14079.7 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: (Boot) (Fixed) (Total:58.52 GB) (Free:6.31 GB) NTFS

Drive d: (Data) (Fixed) (Total:881 GB) (Free:215.12 GB) NTFS

Drive e: (Recover) (Fixed) (Total:50.51 GB) (Free:28.77 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 59.6 GB) (Disk ID: 59BAD0E3)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=58.5 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=1 GB) - (Type=12)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 091DBCCD)

Partition 1: (Not Active) - (Size=881 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=50.5 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015

Ran by Patrick (administrator) on PATRICK-ERAZER on 11-02-2015 13:16:12

Running from C:\Users\Patrick\Desktop

Loaded Profiles: Patrick (Available profiles: Patrick)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Browser)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) D:\Avira\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) D:\Avira\Avira\AntiVir Desktop\avguard.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Malwarebytes Corporation) D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Sony Corporation) D:\SONYPlayMemoriesHome\PMBDeviceInfoProvider.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

() C:\Windows\SysWOW64\PSIService.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

() C:\Program Files (x86)\watchmi\TvdService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(FSPro Labs) D:\My Lockbox\My Lockbox\mylbx.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(NVIDIA Corporation) C:\Users\Patrick\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

() C:\Program Files (x86)\Mouse Driver\Tilt.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

() C:\Program Files (x86)\watchmi\TvdTray.exe

(Avira Operations GmbH & Co. KG) D:\Avira\Avira\AntiVir Desktop\avgnt.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(CyberLink Corp.) D:\Program Files (x86)\PowerDVD10\PDVD10Serv.exe

(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Sony Corporation) D:\SONYPlayMemoriesHome\PMBVolumeWatcher.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) D:\Avira\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) D:\Avira\Avira\AntiVir Desktop\avwebg7.exe

(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe

(BitLeader) D:\Program Files (x86)\fwupdate.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11821160 2011-05-09] (Realtek Semiconductor)

HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)

HKLM\...\Run: [mylbx] => D:\My Lockbox\My Lockbox\mylbx.exe [2584864 2013-07-06] (FSPro Labs)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)

HKLM-x32\...\Run: [Inno Tilt] => C:\Program Files (x86)\Mouse Driver\Tilt.exe [729088 2009-07-30] ()

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] => D:\Avira\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [RemoteControl10] => D:\Program Files (x86)\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)

HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink)

HKLM-x32\...\Run: [UpdatePPShortCut] => D:\Program Files (x86)\PowerProducer\MUITransfer\MUIStartMenu.exe [223096 2012-04-17] (CyberLink Corp.)

HKLM-x32\...\Run: [LGODDFU] => D:\Program Files (x86)\lgfw.exe [27760 2012-07-12] (Bitleader)

HKLM-x32\...\Run: [PMBVolumeWatcher] => D:\SONYPlayMemoriesHome\PMBVolumeWatcher.exe [2711576 2014-10-03] (Sony Corporation)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\Run: [GUDelayStartup] => D:\Glary Utilities 5\StartupManager.exe [37152 2015-01-05] (Glarysoft Ltd)

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\RunOnce: [Uninstall C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\...\MountPoints2: {17db9c87-f84f-11e3-b553-6c626d462129} - "G:\WD Drive Unlock.exe" autoplay=true

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk

ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{AA4D1C5E-116A-4FF4-AA91-28F526868203}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)

BootExecute: autocheck autochk *  BootDefrag.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:49266;https=127.0.0.1:49266

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-297262102-3710466809-3807349961-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://t-online.de/

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

Toolbar: HKU\S-1-5-21-297262102-3710466809-3807349961-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

DPF: HKLM-x32 {A8F2B9BD-A6A0-486A-9744-18920D898429} hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
 

FireFox:

========

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.15.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-297262102-3710466809-3807349961-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru

FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru

FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru
 

Chrome: 

=======

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\gcswf32.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll No File

CHR Plugin: (Chrome NaCl) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll No File

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Default Plug-in) - default_plugin No File

CHR Profile: C:\Users\Patrick\AppData\Local\Google\Chrome\User Data\Default
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AntiVirSchedulerService; D:\Avira\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; D:\Avira\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; D:\Avira\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-16] (Avira Operations GmbH & Co. KG)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)

S2 CLKMSVC10_43E460C0; D:\Program Files (x86)\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-25] (CyberLink)

S2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]

S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-17] (NVIDIA Corporation)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]

R2 MBAMScheduler; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

S2 MBAMService; D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-17] (NVIDIA Corporation)

R2 PMBDeviceInfoProvider; D:\SONYPlayMemoriesHome\PMBDeviceInfoProvider.exe [485400 2014-10-03] (Sony Corporation)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-02-10] ()

R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [174656 2006-11-02] () [File not signed]

R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] () [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-09-24] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-09-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-02] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-09-24] (Avira Operations GmbH & Co. KG)

R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-07-18] (Glarysoft Ltd)

R0 FSProFilter; C:\Windows\System32\Drivers\FSPFltd.sys [54848 2010-07-22] (FSPro Labs)

R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2014-11-04] (Glarysoft Ltd)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-10] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)

S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [204568 2013-08-20] (DEVGURU Co., LTD.(www.devguru.co.kr))
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-11 13:16 - 2015-02-11 13:16 - 00016934 _____ () C:\Users\Patrick\Desktop\FRST.txt

2015-02-11 13:15 - 2015-02-11 13:15 - 02133504 _____ (Farbar) C:\Users\Patrick\Desktop\FRST64.exe

2015-02-11 13:15 - 2015-02-11 13:15 - 00000000 ____D () C:\Users\Patrick\Desktop\FRST-OlderVersion

2015-02-11 13:14 - 2015-02-11 13:14 - 00000168 _____ () C:\Windows\setupact.log

2015-02-11 13:14 - 2015-02-11 13:14 - 00000000 _____ () C:\Windows\setuperr.log

2015-02-10 16:39 - 2015-02-10 23:20 - 00010686 _____ () C:\Windows\WindowsUpdate.log

2015-02-10 16:34 - 2015-02-10 16:36 - 00000000 ____D () C:\AdwCleaner

2015-02-10 15:01 - 2015-02-10 15:01 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-PATRICK-ERAZER-Windows-7-Home-Premium-(64-bit).dat

2015-02-10 15:01 - 2015-02-10 15:01 - 00000000 ____D () C:\RegBackup

2015-02-10 11:03 - 2015-02-11 13:16 - 00000000 ____D () C:\FRST

2015-02-10 11:01 - 2015-02-10 11:01 - 00000000 _____ () C:\Users\Patrick\defogger_reenable

2015-02-10 09:53 - 2015-02-10 19:38 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-02-10 09:53 - 2015-02-10 09:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-02-10 09:53 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-02-10 09:53 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-02-10 09:51 - 2015-02-09 19:36 - 02112512 _____ () C:\Users\Patrick\Desktop\AdwCleaner_4.110.exe

2015-02-08 15:54 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-02-08 15:54 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-02-08 15:54 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-02-08 15:54 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-02-08 15:54 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-02-08 15:54 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-02-08 15:54 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-02-08 15:54 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-02-08 15:54 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-02-08 15:54 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-02-08 15:54 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-02-08 15:54 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-02-08 15:54 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-02-03 19:05 - 2015-02-03 19:05 - 00000000 ____D () C:\Users\Patrick\Desktop\USB Stick Inhalt

2015-01-31 01:24 - 2015-01-31 01:24 - 00000000 ____D () C:\Program Files (x86)\Canon

2015-01-16 23:17 - 2015-01-16 23:17 - 00000000 __SHD () C:\Users\Patrick\AppData\Local\EmieBrowserModeList

2015-01-12 20:25 - 2015-01-12 20:25 - 1612083408 _____ () C:\Users\Patrick\Documents\CyberLinkMediaSuite12.0_Trial_MES140430-02_TR140711-013.tmp

2015-01-12 20:24 - 2015-01-12 20:24 - 00000612 _____ () C:\Users\Patrick\Desktop\CyberLink_Media_Suite_v12.0.lnk

2015-01-12 19:08 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-01-12 19:08 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-01-12 19:04 - 2015-01-12 19:04 - 00000000 ____D () C:\Windows\system32\appraiser

2015-01-12 18:40 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2015-01-12 18:40 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2015-01-12 18:40 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2015-01-12 18:40 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2015-01-12 18:40 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2015-01-12 18:40 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2015-01-12 18:40 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2015-01-12 18:40 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2015-01-12 18:40 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2015-01-12 18:40 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2015-01-12 18:39 - 2015-01-12 18:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET

2015-01-12 18:39 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2015-01-12 18:39 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2015-01-12 18:38 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-01-12 18:38 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-01-12 18:38 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-01-12 18:38 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-01-12 18:38 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-01-12 18:38 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-01-12 18:38 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-01-12 18:38 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-01-12 18:38 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-01-12 18:38 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-01-12 18:38 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-01-12 18:38 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-01-12 18:38 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-01-12 18:38 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-01-12 18:38 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-01-12 18:38 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-01-12 18:38 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-01-12 18:38 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-01-12 18:38 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-01-12 18:38 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-01-12 18:38 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-01-12 18:38 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-01-12 18:38 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-01-12 18:38 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-01-12 18:38 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-01-12 18:38 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-01-12 18:38 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-01-12 18:38 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-01-12 18:38 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-01-12 18:38 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-01-12 18:38 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-01-12 18:38 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-01-12 18:38 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-01-12 18:38 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-01-12 18:38 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-01-12 18:38 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-01-12 18:38 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-01-12 18:38 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-01-12 18:38 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-01-12 18:38 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-01-12 18:38 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-01-12 18:38 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-01-12 18:38 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-01-12 18:38 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-01-12 18:38 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-01-12 18:38 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-01-12 18:38 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-01-12 18:38 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-01-12 18:38 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-01-12 18:38 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-01-12 18:38 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-01-12 18:38 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-01-12 18:38 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-01-12 18:38 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-01-12 18:38 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-01-12 18:38 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2015-01-12 18:38 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-01-12 18:38 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2015-01-12 18:38 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-01-12 18:38 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2015-01-12 18:38 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-01-12 18:38 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-01-12 18:38 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-01-12 18:38 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-01-12 18:38 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-01-12 18:38 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-01-12 18:38 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-01-12 18:38 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2015-01-12 18:38 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2015-01-12 18:38 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-01-12 18:38 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2015-01-12 18:38 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2015-01-12 18:38 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll

2015-01-12 18:38 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2015-01-12 18:38 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll

2015-01-12 18:38 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-01-12 18:38 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2015-01-12 18:38 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2015-01-12 18:38 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2015-01-12 18:38 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2015-01-12 18:37 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-01-12 18:37 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-01-12 18:37 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-01-12 18:37 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-01-12 18:37 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-01-12 18:37 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-01-12 18:37 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-01-12 18:37 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-01-12 18:37 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2015-01-12 18:37 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll

2015-01-12 18:37 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll

2015-01-12 18:37 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll

2015-01-12 18:37 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

2015-01-12 18:37 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll

2015-01-12 18:37 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll

2015-01-12 18:37 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll

2015-01-12 18:37 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll

2015-01-12 18:37 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe

2015-01-12 18:37 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-01-12 18:37 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-01-12 18:37 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-01-12 18:37 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2015-01-12 18:37 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll

2015-01-12 18:37 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2015-01-12 18:36 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2015-01-12 18:36 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe

2015-01-12 18:36 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe

2015-01-12 18:36 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-01-12 18:36 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-01-12 18:36 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-01-12 18:36 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-01-12 18:36 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2015-01-12 18:36 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-01-12 18:36 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-01-12 18:36 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-01-12 18:36 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-01-12 18:36 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2015-01-12 18:36 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2015-01-12 18:36 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2015-01-12 18:36 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2015-01-12 18:36 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-01-12 18:36 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-01-12 18:36 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-01-12 18:36 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-01-12 18:36 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2015-01-12 18:36 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2015-01-12 18:35 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2015-01-12 18:35 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2015-01-12 18:35 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-01-12 18:35 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-01-12 18:35 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-01-12 18:35 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-01-12 18:35 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-01-12 18:35 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-01-12 18:31 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-01-12 18:31 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-01-12 18:31 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-01-12 18:31 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-01-12 18:31 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-01-12 18:31 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-01-12 18:31 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-01-12 18:31 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-01-12 18:31 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-11 13:15 - 2014-06-12 17:19 - 00000298 _____ () C:\Windows\Tasks\GlaryInitialize 5.job

2015-02-11 13:15 - 2013-11-11 18:23 - 00000332 _____ () C:\Windows\lgfwup.ini

2015-02-11 13:14 - 2014-09-20 17:02 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-02-11 13:14 - 2014-06-12 17:19 - 00000000 ____D () C:\Users\Patrick\AppData\Roaming\DiskDefrag

2015-02-11 13:14 - 2011-08-16 16:41 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-10 22:42 - 2012-07-28 11:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-10 22:34 - 2013-01-25 21:35 - 00000000 ____D () C:\Users\Patrick\Documents\Assassin's Creed III

2015-02-10 22:12 - 2011-08-16 16:43 - 01622300 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-02-10 22:12 - 2011-08-16 16:43 - 00686022 _____ () C:\Windows\system32\perfh007.dat

2015-02-10 22:12 - 2011-08-16 16:43 - 00145596 _____ () C:\Windows\system32\perfc007.dat

2015-02-10 19:32 - 2013-01-30 20:52 - 00281392 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr

2015-02-10 19:32 - 2013-01-30 20:52 - 00000000 ____D () C:\Users\Patrick\AppData\Local\PunkBuster

2015-02-10 19:32 - 2013-01-12 00:24 - 00281392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe

2015-02-10 19:32 - 2013-01-12 00:24 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2015-02-10 17:23 - 2011-08-16 16:43 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-02-10 17:23 - 2011-08-16 16:43 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-02-10 16:44 - 2011-11-28 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A41FA24F-3E3D-4045-A89D-1F6E7675A484}

2015-02-10 15:47 - 2011-11-28 19:33 - 00126560 _____ () C:\Users\Patrick\AppData\Local\GDIPFONTCACHEV1.DAT

2015-02-10 15:10 - 2011-08-16 16:43 - 00433592 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-02-10 15:07 - 2011-08-16 16:16 - 00000576 _____ () C:\Windows\win.ini

2015-02-10 13:18 - 2011-08-16 16:46 - 00000035 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_373

2015-02-10 11:01 - 2011-11-28 19:33 - 00000000 ____D () C:\Users\Patrick

2015-02-10 09:53 - 2013-01-26 15:37 - 00000785 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-02-10 09:53 - 2013-01-26 15:37 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-02-08 15:58 - 2012-03-04 11:14 - 01595644 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-02-08 15:57 - 2013-10-20 23:10 - 00000000 ____D () C:\Windows\system32\MRT

2015-02-08 15:54 - 2011-08-16 16:43 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-02-08 15:44 - 2012-07-28 11:11 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-02-08 15:44 - 2012-07-28 11:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-02-08 15:44 - 2011-08-17 17:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-01-31 13:47 - 2012-11-29 17:30 - 00000000 ____D () C:\Users\Patrick\Documents\Flight Simulator X-Dateien

2015-01-31 13:37 - 2011-08-16 16:49 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2015-01-31 01:13 - 2011-08-16 16:44 - 00000000 ____D () C:\Windows\system32\FxsTmp

2015-01-30 19:14 - 2012-02-09 22:31 - 00001477 _____ () C:\Users\Patrick\AppData\Local\RecConfig.xml

2015-01-12 20:24 - 2011-08-17 17:05 - 00000000 ____D () C:\ProgramData\CyberLink

2015-01-12 20:00 - 2014-06-12 17:19 - 00002948 _____ () C:\Windows\System32\Tasks\GU5SkipUAC

2015-01-12 20:00 - 2014-06-12 17:19 - 00002610 _____ () C:\Windows\System32\Tasks\GlaryInitialize 5

2015-01-12 20:00 - 2014-06-12 17:19 - 00000599 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk

2015-01-12 20:00 - 2014-06-12 17:19 - 00000599 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk

2015-01-12 19:04 - 2014-06-01 18:41 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-01-12 19:04 - 2011-08-16 16:49 - 00000000 ____D () C:\Windows\AppCompat

2015-01-12 19:04 - 2011-08-16 16:47 - 00000000 ____D () C:\Windows\PolicyDefinitions
 

==================== Files in the root of some directories =======
 

2014-09-09 21:47 - 2014-09-09 21:53 - 0039936 ___SH () C:\Users\Patrick\AppData\Roaming\Thumbs.db

2012-01-04 21:44 - 2012-01-04 21:44 - 0031344 _____ () C:\Users\Patrick\AppData\Roaming\UserTile.png

2006-12-11 19:13 - 2006-12-11 19:13 - 0097336 _____ (Un4seen Developments) C:\Users\Patrick\AppData\Local\bass.dll

2006-12-11 19:13 - 2006-12-11 19:13 - 0013872 _____ (Un4seen Developments) C:\Users\Patrick\AppData\Local\basscd.dll

2007-08-13 17:46 - 2007-08-13 17:46 - 0102912 _____ (Albert L Faber) C:\Users\Patrick\AppData\Local\CDRip.dll

2007-08-13 17:46 - 2007-08-13 17:46 - 0155136 _____ () C:\Users\Patrick\AppData\Local\lame_enc.dll

2007-01-18 21:09 - 2007-01-18 21:09 - 0623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\Patrick\AppData\Local\No23 Recorder.exe

2005-08-23 22:34 - 2005-08-23 22:34 - 0029184 _____ () C:\Users\Patrick\AppData\Local\no23xwrapper.dll

2006-10-26 01:06 - 2006-10-26 01:06 - 0015872 _____ () C:\Users\Patrick\AppData\Local\ogg.dll

2012-02-09 22:31 - 2015-01-30 19:14 - 0001477 _____ () C:\Users\Patrick\AppData\Local\RecConfig.xml

2012-09-14 19:06 - 2012-09-14 19:06 - 0000017 _____ () C:\Users\Patrick\AppData\Local\resmon.resmoncfg

2006-10-26 01:06 - 2006-10-26 01:06 - 0143872 _____ () C:\Users\Patrick\AppData\Local\vorbis.dll

2006-10-26 01:06 - 2006-10-26 01:06 - 0064000 _____ () C:\Users\Patrick\AppData\Local\vorbisenc.dll

2006-10-26 01:06 - 2006-10-26 01:06 - 0019456 _____ () C:\Users\Patrick\AppData\Local\vorbisfile.dll
 

Some content of TEMP:

====================

C:\Users\Patrick\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-02-03 18:12
 

==================== End Of Log ============================

--- --- ---

--- --- ---