Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Window 7 (64bit): PC seit ca. 1 Woche sehr Langsam (https://www.trojaner-board.de/166320-window-7-64bit-pc-seit-ca-1-woche-sehr-langsam.html)

Q_wer 21.04.2015 17:36
Window 7 (64bit): PC seit ca. 1 Woche sehr Langsam
 
Hallo Trojanerboard Team,

Ich habe den Verdacht mir irgendetwas eingefangen zu haben mein Rechner startet seit ca. 1 Woche sehr langsam: Startzeit 4 min. (also bis ich auf Desktop bin), und sobald ich auf Desktop bin z.B.: Firefox starten 2 min. oder auch Explorer öffnen 30-60 sek.

Nach einiger Zeit ca. 2 min. läuft er wieder schneller.

Danke für jede Hilfe

Gruß Steffen.

####Logfiles####

##defogger (defogger_disable.log)##
Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 18:12 on 21/04/2015 (Steffen)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
##FRST (FRST.txt)##
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
Ran by Steffen (administrator) on STEFFEN-LENOVPC on 21-04-2015 18:13:07
Running from C:\Users\Steffen\Desktop
Loaded Profiles: Steffen (Available profiles: Steffen)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVM GmbH) C:\Program Files (x86)\FRITZ!Powerline\PowerlineService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Windows\jmesoft\Service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Spotify Ltd) C:\Users\Steffen\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Lenovo) C:\Windows\jmesoft\hotkey.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Windows\jmesoft\JME_LOAD.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11543656 2010-10-26] (Realtek Semiconductor)
HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [222504 2009-05-14] (CyberLink Corp.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-02-26] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [jmekey] => C:\windows\jmesoft\hotkey.exe [118784 2011-06-08] (Lenovo)
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-03-16] ()
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [222504 2009-05-14] (CyberLink Corp.)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\Run: [Spotify Web Helper] => C:\Users\Steffen\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-04-11] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WiFi Station.lnk [2015-03-13]
ShortcutTarget: WiFi Station.lnk -> C:\Program Files (x86)\Hercules\WiFi Station\WiFiStation.exe (Hercules)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1470623560-831458022-899744248-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-1470623560-831458022-899744248-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
HKU\S-1-5-21-1470623560-831458022-899744248-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1470623560-831458022-899744248-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1470623560-831458022-899744248-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-13] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-13] (Oracle Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: Rocket Beans TV Sendeplan für Firefox - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default\Extensions\javos-firebeans-rbtvfx@jetpack.xpi [2015-03-14]
FF Extension: Adblock Plus - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-03-13]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.ask.com/?l=dis&o=102875cr&gct=hp
CHR StartupUrls: Default -> "https://de.yahoo.com?fr=hp-avast&type=prc265"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-03-13]
CHR Extension: (Avast Online Security) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-13]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Google Wallet) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-13]
CHR Extension: (Abstract-Blue) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa [2015-03-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVMPowerlineService; C:\Program Files (x86)\FRITZ!Powerline\PowerlineService.exe [139264 2014-05-21] (AVM GmbH) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2015-02-05] (NVIDIA Corporation)
R2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-03-16] () [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-02-16] (LogMeIn, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-02-05] (NVIDIA Corporation)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 CM_VENDER_CMD; C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [17104 2014-07-31] (Windows (R) Win 7 DDK provider)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R3 npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [38400 2012-07-09] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-02-05] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-02-05] (NVIDIA Corporation)
U3 kwtiyaob; \??\C:\Users\Steffen\AppData\Local\Temp\kwtiyaob.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-21 18:13 - 2015-04-21 18:13 - 00016167 _____ () C:\Users\Steffen\Desktop\FRST.txt
2015-04-21 18:12 - 2015-04-21 18:12 - 00000564 _____ () C:\Users\Steffen\Desktop\trj.txt
2015-04-21 18:12 - 2015-04-21 18:12 - 00000476 _____ () C:\Users\Steffen\Desktop\defogger_disable.log
2015-04-21 17:46 - 2015-04-21 17:46 - 00380416 _____ () C:\Users\Steffen\Desktop\Gmer-19357.exe
2015-04-21 17:45 - 2015-04-21 18:13 - 00000000 ____D () C:\FRST
2015-04-21 17:44 - 2015-04-21 17:44 - 02099712 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2015-04-21 17:43 - 2015-04-21 17:43 - 00050477 _____ () C:\Users\Steffen\Desktop\Defogger.exe
2015-04-21 17:43 - 2015-04-21 17:43 - 00000000 _____ () C:\Users\Steffen\defogger_reenable
2015-04-20 17:12 - 2015-04-20 17:15 - 147571744 _____ (Avast Software s.r.o.) C:\Users\Steffen\Downloads\avast_free_antivirus_setup.exe
2015-04-20 17:11 - 2015-04-20 17:11 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-20 17:11 - 2015-04-20 17:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-04-20 17:11 - 2015-04-20 17:11 - 00000000 ____D () C:\Program Files\7-Zip
2015-04-18 12:33 - 2015-04-18 12:50 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3 Launcher
2015-04-18 12:23 - 2015-04-18 12:23 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Blender Foundation
2015-04-16 16:42 - 2015-04-16 16:42 - 00000000 ___SD () C:\windows\system32\CompatTel
2015-04-16 16:42 - 2015-04-16 16:42 - 00000000 ____D () C:\windows\system32\appraiser
2015-04-15 16:54 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-04-15 16:54 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-04-15 16:54 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-04-15 16:54 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-04-15 16:54 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-04-15 16:54 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-04-15 16:54 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-04-15 16:54 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-04-15 16:54 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-04-15 16:54 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-04-15 16:54 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-04-15 16:54 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-04-15 16:54 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-04-15 16:54 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-04-15 16:54 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe
2015-04-15 16:53 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-04-15 16:53 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-04-15 16:53 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-04-15 16:53 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-04-15 16:53 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-04-15 16:53 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-04-15 16:53 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-04-15 16:53 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-04-15 16:53 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-04-15 16:53 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-04-15 16:53 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-04-15 16:53 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-04-15 16:53 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-04-15 16:53 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-04-15 16:53 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-04-15 16:53 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-04-15 16:53 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-04-15 16:53 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-04-15 16:53 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-04-15 16:53 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-04-15 16:53 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 16:53 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-04-15 16:53 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-04-15 16:53 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-04-15 16:53 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-04-15 16:53 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-04-15 16:53 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-04-15 16:53 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-04-15 16:53 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-04-15 16:53 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-04-15 16:53 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-04-15 16:53 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-04-15 16:53 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-04-15 16:53 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-04-15 16:53 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-04-15 16:53 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-04-15 16:53 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-04-15 16:53 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-04-15 16:53 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-04-15 16:53 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-04-15 16:53 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-04-15 16:53 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 16:53 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-04-15 16:53 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-04-15 16:53 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-04-15 16:53 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-04-15 16:53 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-04-15 16:53 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-04-15 16:53 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-04-15 16:53 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-04-15 16:53 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-04-15 16:53 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-04-15 16:53 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-04-15 16:53 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-04-15 16:53 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-04-15 16:53 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-04-15 16:53 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-04-15 16:53 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-04-15 16:53 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-04-15 16:53 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-04-15 16:53 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-04-15 16:53 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 16:53 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-04-15 16:53 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-04-15 16:53 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-04-15 16:53 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-04-15 16:53 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-04-15 16:53 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-04-15 16:53 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-04-15 16:53 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-04-15 16:53 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-04-15 16:53 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-04-15 16:53 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-04-15 16:53 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-04-15 16:53 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-04-15 16:53 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-04-15 16:53 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-04-15 16:53 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys
2015-04-15 16:52 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\windows\system32\clfs.sys
2015-04-15 16:52 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\clfsw32.dll
2015-04-15 16:52 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\windows\SysWOW64\clfsw32.dll
2015-04-14 22:31 - 2015-04-14 22:31 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-04-14 17:34 - 2015-04-14 17:35 - 00001212 _____ () C:\Users\Steffen\Desktop\QWR_Lights.sqf
2015-04-13 22:13 - 2015-04-13 22:13 - 00012583 _____ () C:\Users\Steffen\AppData\Local\recently-used.xbel
2015-04-12 23:22 - 2015-04-12 23:22 - 00288258 _____ () C:\windows\msxml4-KB973688-enu.LOG
2015-04-12 23:21 - 2015-04-12 23:21 - 00291458 _____ () C:\windows\msxml4-KB954430-enu.LOG
2015-04-12 23:21 - 2015-04-12 23:21 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2015-04-12 23:14 - 2015-04-12 23:15 - 00280617 _____ () C:\Users\Steffen\Documents\ts3_clientui-win64-1407159763-2015-04-12 23_14_59.942824.dmp
2015-04-11 23:33 - 2015-04-12 21:12 - 00001046 _____ () C:\Users\Steffen\Desktop\QWR_Bul.sqf
2015-04-11 20:03 - 2015-04-11 20:20 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\ProgramData\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\Program Files (x86)\Nero
2015-04-11 19:23 - 2015-04-12 15:08 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Spotify
2015-04-11 19:23 - 2015-04-11 19:23 - 00001808 _____ () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-04-11 19:21 - 2015-04-12 15:08 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Spotify
2015-04-10 17:51 - 2015-04-10 17:52 - 00000000 ____D () C:\Users\Steffen\Documents\BIS Core Engine
2015-04-10 17:47 - 2015-04-10 17:49 - 00000000 ____D () C:\Users\Steffen\AppData\Local\PboM
2015-04-10 17:47 - 2015-04-10 17:47 - 00002607 _____ () C:\Users\Public\Desktop\PBOManager v.1.4 beta.lnk
2015-04-10 17:47 - 2015-04-10 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PBO Manager
2015-04-10 17:47 - 2015-04-10 17:47 - 00000000 ____D () C:\Program Files (x86)\PBO Manager v.1.4 beta
2015-04-10 17:43 - 2015-04-10 17:43 - 00001897 _____ () C:\Users\Public\Desktop\Blender.lnk
2015-04-10 17:43 - 2015-04-10 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation
2015-04-10 17:43 - 2015-04-10 17:43 - 00000000 ____D () C:\Program Files\Blender Foundation
2015-04-05 23:56 - 2015-04-05 23:56 - 00000869 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2015-04-05 23:56 - 2015-04-05 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-04-05 23:56 - 2015-04-05 23:56 - 00000000 ____D () C:\Program Files\CPUID
2015-04-05 23:51 - 2015-04-06 00:07 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Natural Selection 2
2015-04-04 17:20 - 2015-04-18 12:33 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Bohemia_Interactive
2015-04-04 17:20 - 2015-04-04 17:20 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3 Publisher
2015-04-04 16:08 - 2015-04-04 16:08 - 00000000 ___SD () C:\windows\SysWOW64\GWX
2015-04-04 16:08 - 2015-04-04 16:08 - 00000000 ___SD () C:\windows\system32\GWX
2015-04-04 13:24 - 2015-04-05 15:41 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Bohemia_Interactive_a.s
2015-04-04 12:43 - 2015-04-04 12:43 - 00000222 _____ () C:\Users\Steffen\Desktop\Arma 3 Tools.url
2015-04-04 12:40 - 2015-04-13 22:13 - 00000000 ____D () C:\Users\Steffen\AppData\Local\gtk-2.0
2015-04-04 12:39 - 2015-04-10 17:44 - 00000000 ____D () C:\Users\Steffen\.thumbnails
2015-04-04 12:25 - 2015-04-13 22:13 - 00000000 ____D () C:\Users\Steffen\.gimp-2.8
2015-04-04 12:25 - 2015-04-04 12:25 - 00000000 ____D () C:\Users\Steffen\AppData\Local\gegl-0.2
2015-04-04 02:45 - 2015-04-04 02:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-04 02:43 - 2015-04-04 02:43 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-04-04 02:43 - 2015-04-04 02:43 - 00000000 ____D () C:\Program Files\GIMP 2
2015-04-04 01:40 - 2015-04-04 01:40 - 00000000 ____D () C:\Users\Steffen\AppData\Local\CrashRpt
2015-04-01 20:15 - 2009-06-10 23:00 - 00000824 _____ () C:\windows\system32\Drivers\etc\hosts.20150401-201532.backup
2015-03-29 00:06 - 2015-03-29 00:06 - 00000000 ____D () C:\Users\Steffen\AppData\Local\DCS
2015-03-28 15:03 - 2015-04-11 20:18 - 00000000 ____D () C:\Users\Steffen\Desktop\MusikStreams
2015-03-27 23:13 - 2015-03-29 15:51 - 00000000 ____D () C:\Users\Steffen\Documents\My Games
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Users\Steffen\Documents\Eigene Spiele
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Gas Powered Games
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Program Files (x86)\Sorian AI Mod
2015-03-27 23:05 - 2015-04-21 17:29 - 00000000 ____D () C:\Users\Steffen\AppData\Local\LogMeIn Hamachi
2015-03-27 23:05 - 2015-03-27 23:05 - 00000000 ____D () C:\Users\Steffen\AppData\Local\LogMeIn
2015-03-27 23:05 - 2015-03-27 23:05 - 00000000 ____D () C:\ProgramData\LogMeIn
2015-03-27 23:02 - 2015-03-27 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-03-27 23:02 - 2015-03-27 23:02 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2015-03-27 22:54 - 2015-03-27 22:54 - 00002596 _____ () C:\Users\Public\Desktop\Forged Alliance.lnk
2015-03-27 22:54 - 2015-03-27 22:54 - 00000000 ____D () C:\temp
2015-03-27 22:53 - 2015-03-27 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ
2015-03-27 22:43 - 2015-03-27 22:43 - 00000722 _____ () C:\windows\DXError.log
2015-03-27 22:43 - 2015-03-27 22:43 - 00000000 ____D () C:\Program Files (x86)\THQ
2015-03-25 00:01 - 2015-03-25 00:01 - 00278053 _____ () C:\Users\Steffen\Documents\ts3_clientui-win64-1407159763-2015-03-24 23_01_47.647175.dmp
2015-03-24 19:07 - 2015-04-12 21:11 - 00000675 _____ () C:\Users\Steffen\Desktop\QWR_Mir.sqf
2015-03-24 18:06 - 2015-03-24 18:06 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\OpenOffice
2015-03-24 18:05 - 2015-03-24 18:05 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2015-03-24 18:05 - 2015-03-24 18:05 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-03-24 18:05 - 2015-03-24 18:05 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2015-03-22 23:24 - 2015-03-22 23:24 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Uber Entertainment
2015-03-22 23:22 - 2015-04-11 20:17 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\vlc
2015-03-22 23:21 - 2015-03-22 23:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-03-22 23:21 - 2015-03-22 23:21 - 00000000 ____D () C:\Program Files (x86)\VideoLAN

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-21 17:56 - 2012-06-15 02:08 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-21 17:47 - 2015-03-13 17:13 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\TS3Client
2015-04-21 17:47 - 2015-03-13 17:03 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-21 17:43 - 2015-03-13 16:25 - 00000000 ____D () C:\Users\Steffen
2015-04-21 17:34 - 2009-07-14 06:45 - 00020480 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-21 17:34 - 2009-07-14 06:45 - 00020480 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-21 17:33 - 2012-06-15 01:06 - 01887522 _____ () C:\windows\WindowsUpdate.log
2015-04-21 17:26 - 2012-06-15 02:08 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-21 17:25 - 2012-06-15 01:58 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-21 17:25 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-04-21 17:25 - 2009-07-14 06:51 - 00047241 _____ () C:\windows\setupact.log
2015-04-20 23:18 - 2015-03-13 23:13 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-04-20 22:45 - 2015-03-13 16:51 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-04-20 22:45 - 2010-11-21 05:47 - 01215896 _____ () C:\windows\PFRO.log
2015-04-19 21:47 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF
2015-04-19 19:03 - 2015-03-14 20:33 - 00000000 ____D () C:\Users\Steffen\AppData\Local\CrashDumps
2015-04-19 17:51 - 2015-03-14 20:01 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\FileZilla
2015-04-19 17:51 - 2015-03-14 16:32 - 00000000 ____D () C:\Program Files (x86)\ArmA3Sync-1-4-58
2015-04-19 17:46 - 2015-03-14 20:00 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3
2015-04-18 17:22 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2015-04-16 22:29 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\AppCompat
2015-04-16 16:42 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-04-15 22:37 - 2012-06-15 02:02 - 01593956 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-04-15 22:37 - 2012-06-15 01:48 - 00699416 _____ () C:\windows\system32\perfh007.dat
2015-04-15 22:37 - 2012-06-15 01:48 - 00149556 _____ () C:\windows\system32\perfc007.dat
2015-04-15 22:37 - 2009-07-14 07:13 - 01593956 _____ () C:\windows\system32\PerfStringBackup.INI
2015-04-15 22:35 - 2015-03-18 18:22 - 00000000 ____D () C:\windows\system32\MRT
2015-04-15 22:32 - 2015-03-18 18:22 - 128913832 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-04-14 22:19 - 2015-03-13 23:13 - 00778416 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-04-14 22:19 - 2015-03-13 23:13 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-14 22:19 - 2015-03-13 23:13 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-04-05 23:51 - 2015-03-14 20:32 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\NVIDIA
2015-04-04 16:12 - 2015-03-13 22:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-01 20:11 - 2015-03-20 16:15 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-29 20:17 - 2015-03-14 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-03-29 20:17 - 2015-03-14 20:01 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-03-29 15:51 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-28 22:07 - 2011-02-15 12:41 - 00000000 ____D () C:\Program Files\Windows Journal
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\winrm
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\WCN
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\sysprep
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\Printing_Admin_Scripts
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\winrm
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\slmgr
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Setup
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\oobe
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\MUI
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\migwiz
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\com
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\sysprep
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Setup
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\oobe
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\migwiz
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-28 22:06 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\WCN
2015-03-28 22:06 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\Printing_Admin_Scripts
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\MUI
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\com
2015-03-27 22:43 - 2012-06-15 02:12 - 00167908 _____ () C:\windows\DirectX.log
2015-03-27 22:41 - 2012-06-15 01:05 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-25 17:36 - 2009-07-14 06:45 - 00289736 _____ () C:\windows\system32\FNTCACHE.DAT
2015-03-24 18:15 - 2015-03-13 16:28 - 00066904 _____ () C:\Users\Steffen\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Files in the root of some directories =======

2015-04-13 22:13 - 2015-04-13 22:13 - 0012583 _____ () C:\Users\Steffen\AppData\Local\recently-used.xbel
2012-06-15 02:04 - 2012-06-15 02:04 - 1914000 _____ (Adobe Systems Incorporated) C:\ProgramData\flashax10.exe

Files to move or delete:
====================
C:\ProgramData\flashax10.exe


Some content of TEMP:
====================
C:\Users\Steffen\AppData\Local\Temp\jshortcut-1046753544460363393.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-1063059994717996837.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-144011296613799121.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-1528665914881668628.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-1616195597076069583.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-173870097933652478.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-1783601237491333021.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-1890506041925337734.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-2196376210363626008.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-2262301978078683772.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-2567194603339965530.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-2785083538412162090.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-3044571000641705212.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-3284367589061080845.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-381448528026168687.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-4124949072930134737.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-4190432866520356069.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-4305008384474824606.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-4493402089742290830.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-4650116406574751924.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-5433684833005243912.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-5456645900210753824.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-5913751259926090325.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-6086443517986224539.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-6203092123610158314.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-6221732563408842572.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-7503960352542689433.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-8081738566262270234.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-8090792525585712214.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-820695831516127749.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-824789143691113140.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-832187949966525536.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-833633425233073199.dll
C:\Users\Steffen\AppData\Local\Temp\jshortcut-8490835447211275030.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-18 17:14

==================== End Of Log ============================
##FRST (Addition.txt)##
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015
Ran by Steffen at 2015-04-21 18:13:20
Running from C:\Users\Steffen\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Arma 3 Tools (HKLM-x32\...\Steam App 233800) (Version:  - Bohemia Interactive)
Blender (HKLM\...\Blender) (Version: 2.74 - Blender Foundation)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DCS World (HKLM-x32\...\Steam App 223750) (Version:  - Eagle Dynamics)
FileZilla Client 3.10.3 (HKLM-x32\...\FileZilla Client) (Version: 3.10.3 - Tim Kosse)
FRITZ!Powerline (HKLM-x32\...\{F9C9378B-78D5-4CC0-8683-B7915DFEA9C5}) (Version: 01.00.65 - AVM Berlin)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
Google Update Helper (x32 Version: 1.2.183.39 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPGNet (HKLM-x32\...\{C194D333-B84A-4BB7-B35E-060732D98DC4}) (Version: 1.0.0 - Gas Powered Games)
Hercules WiFi Station (HKLM-x32\...\{1157EAA9-33E6-43A3-8ECC-20518A2284F8}) (Version: 3.4.0.0 - Hercules)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Blacksilk USB Keyboard Driver (HKLM-x32\...\{B266E062-D6C5-485B-B426-51B152B041A6}) (Version: V1.4.11.0608 - Lenovo)
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.4 - Lenovo Inc.)
Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.2431 - CyberLink Corp.)
Lenovo Rescue System (Version: 3.0.2431 - CyberLink Corp.) Hidden
Lenovo Treiber- und Anwendungsinstallation (HKLM-x32\...\{45970CD1-D599-47D4-938F-3E9800D54ED1}) (Version: 5.10.3426 - Lenovo)
Life is Feudal: Your Own (HKLM-x32\...\Steam App 290080) (Version:  - Bitbox Ltd.)
Logitech G430 Driver (HKLM-x32\...\G430_Driver) (Version: 8.53.0.2 - Logitech)
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.177 - Logitech Inc.)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.319 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.319 - LogMeIn, Inc.) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version:  - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Natural Selection 2 (HKLM-x32\...\Steam App 4920) (Version:  - Unknown Worlds Entertainment)
NaturalPoint USB Drivers x64 (HKLM\...\{B408139D-04D6-4464-A979-D335E48F7063}) (Version: 2.50.0000 - NaturalPoint)
Nero 9 Lite (HKLM-x32\...\{102fab7a-3c58-44de-9aba-f1b2d9282ada}) (Version:  - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PBO Manager v.1.4 beta (HKLM-x32\...\{0E3A79BF-E860-4371-8ABC-7AAEDD68DA0A}) (Version: 1.4.0 -  )
Planetary Annihilation (HKLM-x32\...\Steam App 233250) (Version:  - Uber Entertainment)
Play withSIX Windows client (HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\PlaywithSIX) (Version: 1.66.1146.4 - SIX Networks GmbH)
POSTAL 2 (HKLM-x32\...\Steam App 223470) (Version:  - Running With Scissors)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6230 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Sorian AI Mod 2.1.1 (HKLM-x32\...\Sorian AI Mod_is1) (Version:  - )
Spotify (HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\Spotify) (Version: 1.0.3.101.gbfa97dfe - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Supreme Commander - Forged Alliance (HKLM-x32\...\{31D95937-B237-405D-920C-A3EF4E482395}) (Version: 1.00.0000 - Gas Powered Games)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TrackIR 5 (HKLM-x32\...\{2f2e6053-043c-4d69-94d0-4d42304ea4ee}) (Version: 5.2.0200 - NaturalPoint)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1470623560-831458022-899744248-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()

==================== Restore Points  =========================

13-03-2015 20:21:41 Windows Update
14-03-2015 10:56:37 Windows Update
14-03-2015 16:15:11 Installed 7-Zip 9.20 (x64 edition)
14-03-2015 17:34:12 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
14-03-2015 17:35:04 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
14-03-2015 17:37:24 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
14-03-2015 17:38:28 Microsoft Visual C++ 2005 Redistributable wird installiert
14-03-2015 17:40:05 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
14-03-2015 17:43:21 DirectX wurde installiert
14-03-2015 18:26:28 Installed NaturalPoint USB Drivers x64.
14-03-2015 18:27:15 Installed TrackIR 5.
14-03-2015 19:54:06 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
14-03-2015 19:54:38 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
14-03-2015 19:56:29 DirectX wurde installiert
14-03-2015 20:04:55 DirectX wurde installiert
15-03-2015 02:28:16 Windows Update
15-03-2015 15:32:56 Windows Update
18-03-2015 18:13:15 Windows Update
18-03-2015 23:28:48 Windows Update
19-03-2015 22:39:25 Windows Update
19-03-2015 23:24:14 Windows Update
20-03-2015 21:15:38 avast! antivirus system restore point
20-03-2015 21:28:12 Windows Update
21-03-2015 11:20:40 avast! antivirus system restore point
21-03-2015 11:25:07 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
24-03-2015 17:55:32 Windows Update
24-03-2015 18:02:52 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
24-03-2015 18:04:45 OpenOffice 4.1.1 wird installiert
27-03-2015 19:31:42 Windows Update
27-03-2015 22:40:35 Installiert Supreme Commander: Forged Alliance (TM)
27-03-2015 22:41:21 DirectX wurde installiert
27-03-2015 23:01:53 Installed LogMeIn Hamachi
28-03-2015 11:28:28 Sprachpaketdeinstallation
31-03-2015 19:11:27 Windows Update
04-04-2015 12:24:08 avast! antivirus system restore point
04-04-2015 12:30:08 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
04-04-2015 12:50:15 Microsoft Visual C++ 2005 Redistributable wird installiert
04-04-2015 16:07:27 Windows Update
10-04-2015 14:44:38 Windows Update
10-04-2015 17:47:19 Installed PBO Manager v.1.4 beta
11-04-2015 20:01:09 Installed Nero 9 Lite 4.4.9.0
12-04-2015 23:20:30 Windows Update
15-04-2015 22:29:20 Windows Update
20-04-2015 17:17:02 avast! antivirus system restore point
21-04-2015 17:32:01 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-04-01 20:15 - 00450771 ____R C:\windows\system32\Drivers\etc\hosts
127.0.0.1        www.007guard.com
127.0.0.1        007guard.com
127.0.0.1        008i.com
127.0.0.1        www.008k.com
127.0.0.1        008k.com
127.0.0.1        www.00hq.com
127.0.0.1        00hq.com
127.0.0.1        010402.com
127.0.0.1        www.032439.com
127.0.0.1        032439.com
127.0.0.1        www.0scan.com
127.0.0.1        0scan.com
127.0.0.1        1000gratisproben.com
127.0.0.1        www.1000gratisproben.com
127.0.0.1        1001namen.com
127.0.0.1        www.1001namen.com
127.0.0.1        100888290cs.com
127.0.0.1        www.100888290cs.com
127.0.0.1        www.100sexlinks.com
127.0.0.1        100sexlinks.com
127.0.0.1        10sek.com
127.0.0.1        www.10sek.com
127.0.0.1        www.1-2005-search.com
127.0.0.1        1-2005-search.com
127.0.0.1        123fporn.info
127.0.0.1        www.123fporn.info
127.0.0.1        123haustiereundmehr.com
127.0.0.1        www.123haustiereundmehr.com
127.0.0.1        123moviedownload.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05D4D76C-2EB6-40F7-A9CD-EAA0AD2BBD42} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {09CF19DE-5B12-432B-8E92-E8F5603775BA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {0D68C265-AEEF-4B0B-A889-6B5F966BEDF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {3A535677-9F47-41A1-9197-75D6A8EC868B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {669C62C7-9B7C-4B73-8706-EE5FF0E89A5E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {67E7FEAC-3028-45AC-8C16-2242922B0197} - System32\Tasks\OFFICE2010ACT => C:\Windows\system32\OFFICEICON.vbs
Task: {6F271EA9-E8FC-42F6-8A4E-1233A19FFD7D} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {A013C437-11F7-47ED-BE95-DBF73FE5BC9D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-13] (Google Inc.)
Task: {A38134C5-1487-4901-B62F-DB91BE209E14} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-13] (Google Inc.)
Task: {AFE8E893-8BCC-4529-9A31-7088C7556713} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {D776BAF3-22BD-45B1-BF48-B6FA1E270C8E} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2012-06-15 01:08 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-06-15 01:10 - 2011-03-16 05:47 - 00032768 _____ () C:\Windows\jmesoft\Service.exe
2015-03-29 12:25 - 2015-03-29 12:25 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-06-15 01:10 - 2011-05-17 22:54 - 00024576 _____ () C:\Windows\jmesoft\JME_LOAD.exe
2012-06-15 01:10 - 2011-05-17 22:27 - 00028672 _____ () C:\Windows\jmesoft\hidhook.dll
2015-03-20 16:15 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-03-20 16:15 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-03-20 16:15 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7866 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1470623560-831458022-899744248-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: Media is not connected to internet.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-1470623560-831458022-899744248-500 - Administrator - Disabled)
Gast (S-1-5-21-1470623560-831458022-899744248-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1470623560-831458022-899744248-1003 - Limited - Enabled)
Steffen (S-1-5-21-1470623560-831458022-899744248-1001 - Administrator - Enabled) => C:\Users\Steffen

==================== Faulty Device Manager Devices =============

Name: Hamachi Network Interface
Description: Hamachi Network Interface
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn, Inc.
Service: hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/21/2015 05:26:16 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/20/2015 10:46:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/20/2015 05:07:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/19/2015 09:05:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/19/2015 08:20:39 PM) (Source: AVMPowerlineService) (EventID: 1) (User: )
Description: Fehler 10054 beim Empfangen von Daten vom Client.

Error: (04/19/2015 07:03:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: csgo.exe, Version: 0.0.0.0, Zeitstempel: 0x54c98822
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1a98
Startzeit der fehlerhaften Anwendung: 0xcsgo.exe0
Pfad der fehlerhaften Anwendung: csgo.exe1
Pfad des fehlerhaften Moduls: csgo.exe2
Berichtskennung: csgo.exe3

Error: (04/19/2015 02:28:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/19/2015 10:00:46 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/18/2015 09:32:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/17/2015 02:04:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (04/21/2015 05:26:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/21/2015 05:26:43 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (04/21/2015 05:26:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/21/2015 05:26:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (04/20/2015 10:48:24 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (04/20/2015 10:47:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/20/2015 10:47:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (04/20/2015 10:46:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/20/2015 10:46:50 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (04/20/2015 05:07:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053


Microsoft Office Sessions:
=========================
Error: (04/21/2015 05:26:16 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/20/2015 10:46:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/20/2015 05:07:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/19/2015 09:05:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/19/2015 08:20:39 PM) (Source: AVMPowerlineService) (EventID: 1) (User: )
Description: 10054

Error: (04/19/2015 07:03:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: csgo.exe0.0.0.054c98822unknown0.0.0.000000000c0000005000000001a9801d07ac026f77752C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exeunknownf65adfa2-e6b5-11e4-bb49-cdb47150df2c

Error: (04/19/2015 02:28:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/19/2015 10:00:46 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/18/2015 09:32:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/17/2015 02:04:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
Percentage of memory in use: 46%
Total physical RAM: 4078.38 MB
Available physical RAM: 2162.38 MB
Total Pagefile: 8154.94 MB
Available Pagefile: 5922.88 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:906.34 GB) (Free:466.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 683E4646)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=906.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25.1 GB) - (Type=12)

==================== End Of Log ============================
##GMER (Gmer.txt)##
Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-04-21 18:25:20
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST31000524AS rev.JC66 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\Steffen\AppData\Local\Temp\kwtiyaob.sys


---- User code sections - GMER 2.1 ----

.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                  0000000075421401 2 bytes JMP 765db1ef C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                    0000000075421419 2 bytes JMP 765db31a C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                  0000000075421431 2 bytes JMP 76658f09 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                  000000007542144a 2 bytes CALL 765b4885 C:\windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                * 9
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                    00000000754214dd 2 bytes JMP 76658802 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                              00000000754214f5 2 bytes JMP 766589d8 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                    000000007542150d 2 bytes JMP 766586f8 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                              0000000075421525 2 bytes JMP 76658ac2 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                    000000007542153d 2 bytes JMP 765cfc78 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                        0000000075421555 2 bytes JMP 765d68bf C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                  000000007542156d 2 bytes JMP 76658fc1 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                    0000000075421585 2 bytes JMP 76658b22 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                      000000007542159d 2 bytes JMP 766586bc C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                    00000000754215b5 2 bytes JMP 765cfd11 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                  00000000754215cd 2 bytes JMP 765db2b0 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                              00000000754216b2 2 bytes JMP 76658e84 C:\windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2408] C:\windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                              00000000754216bd 2 bytes JMP 76658651 C:\windows\syswow64\kernel32.dll
---- Processes - GMER 2.1 ----

Library  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{994F0D88-9BBF-4CA0-8607-A67A47C41A6F}\offreg.dll (*** suspicious ***) @ C:\windows\System32\svchost.exe [4868](2015-04-21 15:58:18)  000007fef4bd0000

---- EOF - GMER 2.1 ----

Hoffe ich sollte die Logsfiles jetzt schon mit reinschreiben wenn nicht tut mir das sehr leid

:dankeschoen:

schrauber 21.04.2015 17:38
hi,

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Q_wer 21.04.2015 20:28
Hallo,

danke für die super schnelle Antwort:


##mbar.exe. (mbar-log-2015-04-21 (21-03-20).txt)##
Code:
Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
  main:    v2015.04.21.05
  rootkit: v2015.04.20.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17728
Steffen :: STEFFEN-LENOVPC [administrator]

21.04.2015 21:03:20
mbar-log-2015-04-21 (21-03-20).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 344213
Time elapsed: 11 minute(s), 7 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

##tdsskiller (TDSSKiller.3.0.0.44_21.04.2015_21.18.10_log.txt)##
Code:
21:18:10.0174 0x16f8  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
21:18:12.0562 0x16f8  ============================================================
21:18:12.0562 0x16f8  Current date / time: 2015/04/21 21:18:12.0562
21:18:12.0562 0x16f8  SystemInfo:
21:18:12.0562 0x16f8 
21:18:12.0562 0x16f8  OS Version: 6.1.7601 ServicePack: 1.0
21:18:12.0562 0x16f8  Product type: Workstation
21:18:12.0562 0x16f8  ComputerName: STEFFEN-LENOVPC
21:18:12.0562 0x16f8  UserName: Steffen
21:18:12.0562 0x16f8  Windows directory: C:\windows
21:18:12.0562 0x16f8  System windows directory: C:\windows
21:18:12.0562 0x16f8  Running under WOW64
21:18:12.0562 0x16f8  Processor architecture: Intel x64
21:18:12.0562 0x16f8  Number of processors: 8
21:18:12.0562 0x16f8  Page size: 0x1000
21:18:12.0562 0x16f8  Boot type: Normal boot
21:18:12.0562 0x16f8  ============================================================
21:18:14.0300 0x16f8  KLMD registered as C:\windows\system32\drivers\19932946.sys
21:18:14.0476 0x16f8  System UUID: {1E42F672-AAA5-81A6-7EC6-06506BCA4247}
21:18:14.0936 0x16f8  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:18:14.0941 0x16f8  ============================================================
21:18:14.0941 0x16f8  \Device\Harddisk0\DR0:
21:18:14.0941 0x16f8  MBR partitions:
21:18:14.0941 0x16f8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:18:14.0941 0x16f8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x714AE800
21:18:14.0941 0x16f8  ============================================================
21:18:14.0959 0x16f8  C: <-> \Device\Harddisk0\DR0\Partition2
21:18:14.0959 0x16f8  ============================================================
21:18:14.0959 0x16f8  Initialize success
21:18:14.0959 0x16f8  ============================================================
21:18:39.0174 0x0cdc  ============================================================
21:18:39.0174 0x0cdc  Scan started
21:18:39.0174 0x0cdc  Mode: Manual; SigCheck; TDLFS;
21:18:39.0174 0x0cdc  ============================================================
21:18:39.0174 0x0cdc  KSN ping started
21:18:41.0936 0x0cdc  KSN ping finished: true
21:18:42.0814 0x0cdc  ================ Scan system memory ========================
21:18:42.0814 0x0cdc  System memory - ok
21:18:42.0814 0x0cdc  ================ Scan services =============================
21:18:42.0939 0x0cdc  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\windows\system32\drivers\1394ohci.sys
21:18:43.0024 0x0cdc  1394ohci - ok
21:18:43.0050 0x0cdc  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\windows\system32\drivers\ACPI.sys
21:18:43.0065 0x0cdc  ACPI - ok
21:18:43.0067 0x0cdc  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi        C:\windows\system32\drivers\acpipmi.sys
21:18:43.0122 0x0cdc  AcpiPmi - ok
21:18:43.0191 0x0cdc  [ B04A4810C6CC205F9DC72DC22E4AB236, 547321F5C28C80D4818372D65E2A33D4BAC593015DD6613B24586FE4B4A95D5D ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:18:43.0203 0x0cdc  AdobeFlashPlayerUpdateSvc - ok
21:18:43.0239 0x0cdc  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx        C:\windows\system32\drivers\adp94xx.sys
21:18:43.0258 0x0cdc  adp94xx - ok
21:18:43.0267 0x0cdc  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci        C:\windows\system32\drivers\adpahci.sys
21:18:43.0283 0x0cdc  adpahci - ok
21:18:43.0289 0x0cdc  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320        C:\windows\system32\drivers\adpu320.sys
21:18:43.0300 0x0cdc  adpu320 - ok
21:18:43.0323 0x0cdc  [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc    C:\windows\System32\aelupsvc.dll
21:18:43.0418 0x0cdc  AeLookupSvc - ok
21:18:43.0479 0x0cdc  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD            C:\windows\system32\drivers\afd.sys
21:18:43.0514 0x0cdc  AFD - ok
21:18:43.0541 0x0cdc  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\windows\system32\drivers\agp440.sys
21:18:43.0550 0x0cdc  agp440 - ok
21:18:43.0566 0x0cdc  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG            C:\windows\System32\alg.exe
21:18:43.0591 0x0cdc  ALG - ok
21:18:43.0618 0x0cdc  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\windows\system32\drivers\aliide.sys
21:18:43.0627 0x0cdc  aliide - ok
21:18:43.0669 0x0cdc  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\windows\system32\drivers\amdide.sys
21:18:43.0678 0x0cdc  amdide - ok
21:18:43.0682 0x0cdc  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8          C:\windows\system32\drivers\amdk8.sys
21:18:43.0708 0x0cdc  AmdK8 - ok
21:18:43.0720 0x0cdc  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\windows\system32\drivers\amdppm.sys
21:18:43.0740 0x0cdc  AmdPPM - ok
21:18:43.0745 0x0cdc  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata        C:\windows\system32\drivers\amdsata.sys
21:18:43.0755 0x0cdc  amdsata - ok
21:18:43.0775 0x0cdc  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\windows\system32\drivers\amdsbs.sys
21:18:43.0787 0x0cdc  amdsbs - ok
21:18:43.0804 0x0cdc  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata        C:\windows\system32\drivers\amdxata.sys
21:18:43.0812 0x0cdc  amdxata - ok
21:18:43.0846 0x0cdc  [ 90C53BD47979FB8814F465A08B885102, 5EDFC1909FC1FF9133A534DFCC5408CF3A777AC41FB21FAD375436E3D86C02EC ] AppID          C:\windows\system32\drivers\appid.sys
21:18:43.0880 0x0cdc  AppID - ok
21:18:43.0892 0x0cdc  [ 72D4757510FDA69D729169C00AFC211E, FB9686D0D94EE7C19A3994C29E8331A6EC3020B2980B2CC75F72F3AB25512C15 ] AppIDSvc        C:\windows\System32\appidsvc.dll
21:18:43.0903 0x0cdc  AppIDSvc - ok
21:18:43.0916 0x0cdc  [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo        C:\windows\System32\appinfo.dll
21:18:43.0960 0x0cdc  Appinfo - ok
21:18:43.0964 0x0cdc  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc            C:\windows\system32\drivers\arc.sys
21:18:43.0973 0x0cdc  arc - ok
21:18:43.0978 0x0cdc  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\windows\system32\drivers\arcsas.sys
21:18:43.0987 0x0cdc  arcsas - ok
21:18:44.0098 0x0cdc  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
21:18:44.0132 0x0cdc  aspnet_state - ok
21:18:44.0178 0x0cdc  [ BA4B999D245287608A79C92CDAE6F3C1, 799CC0FB185FDF3438687184944E6F6AB6EE73B3B542542D3C13C0FF1A8C0276 ] aswHwid        C:\windows\system32\drivers\aswHwid.sys
21:18:44.0190 0x0cdc  aswHwid - ok
21:18:44.0201 0x0cdc  [ 245D3A0670491E1F88759EC45C9F7314, 1FFBDDDC6FCD29770B439933EEB8BE1ABA9149193932B2481720E8E9F265A797 ] aswMonFlt      C:\windows\system32\drivers\aswMonFlt.sys
21:18:44.0210 0x0cdc  aswMonFlt - ok
21:18:44.0220 0x0cdc  [ BC18D5B42B19564BA09156410E1FB9BE, 0DA9636632462208AE4D360BFE5A8187644B036A0D43E981665D888A5363B953 ] aswRdr          C:\windows\system32\drivers\aswRdr2.sys
21:18:44.0229 0x0cdc  aswRdr - ok
21:18:44.0242 0x0cdc  [ 713AFFD4E38553AEF04617C985B4030B, A09FBE4D49390024E8CF93352EACEB5AC53BEE5A4E5A76F5BE0341F8A002C4DD ] aswRvrt        C:\windows\system32\drivers\aswRvrt.sys
21:18:44.0252 0x0cdc  aswRvrt - ok
21:18:44.0300 0x0cdc  [ 669F6B37965756E407B447272B5EE39F, FE2C0A8F96415191650485AED637A45B26E7B9A25A4BFB5D809844BD24FD6BA9 ] aswSnx          C:\windows\system32\drivers\aswSnx.sys
21:18:44.0331 0x0cdc  aswSnx - ok
21:18:44.0361 0x0cdc  [ 3A145C94A519E52FE7E99460DD0DF53C, 91E9544B1B72FCC32463BF34838DAA9F14DCABF3BE9FE9382087ACDB3B4FC598 ] aswSP          C:\windows\system32\drivers\aswSP.sys
21:18:44.0378 0x0cdc  aswSP - ok
21:18:44.0422 0x0cdc  [ 8CDA894FA86D03FB43063D5FD85EFCAE, 20D110ACC84300514557AB6E565CFA0101DA749559B52877A41A509E79314AF6 ] aswStm          C:\windows\system32\drivers\aswStm.sys
21:18:44.0432 0x0cdc  aswStm - ok
21:18:44.0440 0x0cdc  [ 11644D8399F4AC8BB12C2364DCB87CB4, 828C3A03AB9D5F0650C7B90B7479CCAAD586B22BB7AC6DB7C91E8D9D80427DFB ] aswVmm          C:\windows\system32\drivers\aswVmm.sys
21:18:44.0452 0x0cdc  aswVmm - ok
21:18:44.0504 0x0cdc  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys
21:18:44.0542 0x0cdc  AsyncMac - ok
21:18:44.0569 0x0cdc  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi          C:\windows\system32\drivers\atapi.sys
21:18:44.0577 0x0cdc  atapi - ok
21:18:44.0701 0x0cdc  [ 3EFD964D52221360AF0673CD61C2F4F5, 76D636CAF2E4FEDAAC6B0D958865A901340CF836EE4FCE59F1D5291E3BEC9F1E ] atikmdag        C:\windows\system32\DRIVERS\atikmdag.sys
21:18:44.0869 0x0cdc  atikmdag - ok
21:18:44.0929 0x0cdc  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
21:18:44.0954 0x0cdc  AudioEndpointBuilder - ok
21:18:44.0970 0x0cdc  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\windows\System32\Audiosrv.dll
21:18:44.0991 0x0cdc  AudioSrv - ok
21:18:45.0134 0x0cdc  [ 35714DC1ADD995681D890D4382C75721, C1D10F2D47D348DCEA363B676E35A363FE8FA0E24295C4AD90F7EA37826A822D ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
21:18:45.0147 0x0cdc  avast! Antivirus - ok
21:18:45.0296 0x0cdc  [ 986B03BCC7679B181EC540249956B080, 35FD1229DD016B0837A2879E685A830034DD36D5F52ECBAFA358299DCB126989 ] AvastVBoxSvc    C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
21:18:45.0376 0x0cdc  AvastVBoxSvc - ok
21:18:45.0452 0x0cdc  [ F161CF8F628130B464E6A908723D488C, 95D40B679C132989B6031CC566235033400DA88006CF258F1CEFFB0D105E3B5B ] AVMPowerlineService C:\Program Files (x86)\FRITZ!Powerline\PowerlineService.exe
21:18:45.0471 0x0cdc  AVMPowerlineService - detected UnsignedFile.Multi.Generic ( 1 )
21:18:48.0427 0x0cdc  Detect skipped due to KSN trusted
21:18:48.0427 0x0cdc  AVMPowerlineService - ok
21:18:48.0484 0x0cdc  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\windows\System32\AxInstSV.dll
21:18:48.0555 0x0cdc  AxInstSV - ok
21:18:48.0593 0x0cdc  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv        C:\windows\system32\drivers\bxvbda.sys
21:18:48.0631 0x0cdc  b06bdrv - ok
21:18:48.0655 0x0cdc  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\windows\system32\DRIVERS\b57nd60a.sys
21:18:48.0679 0x0cdc  b57nd60a - ok
21:18:48.0711 0x0cdc  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\windows\System32\bdesvc.dll
21:18:48.0738 0x0cdc  BDESVC - ok
21:18:48.0751 0x0cdc  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\windows\system32\drivers\Beep.sys
21:18:48.0774 0x0cdc  Beep - ok
21:18:48.0826 0x0cdc  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE            C:\windows\System32\bfe.dll
21:18:48.0888 0x0cdc  BFE - ok
21:18:48.0936 0x0cdc  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\windows\System32\qmgr.dll
21:18:49.0078 0x0cdc  BITS - ok
21:18:49.0092 0x0cdc  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\windows\system32\DRIVERS\blbdrive.sys
21:18:49.0104 0x0cdc  blbdrive - ok
21:18:49.0107 0x0cdc  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\windows\system32\DRIVERS\bowser.sys
21:18:49.0144 0x0cdc  bowser - ok
21:18:49.0147 0x0cdc  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\windows\system32\drivers\BrFiltLo.sys
21:18:49.0167 0x0cdc  BrFiltLo - ok
21:18:49.0169 0x0cdc  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\windows\system32\drivers\BrFiltUp.sys
21:18:49.0181 0x0cdc  BrFiltUp - ok
21:18:49.0217 0x0cdc  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser        C:\windows\System32\browser.dll
21:18:49.0254 0x0cdc  Browser - ok
21:18:49.0262 0x0cdc  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid        C:\windows\System32\Drivers\Brserid.sys
21:18:49.0313 0x0cdc  Brserid - ok
21:18:49.0316 0x0cdc  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\windows\System32\Drivers\BrSerWdm.sys
21:18:49.0329 0x0cdc  BrSerWdm - ok
21:18:49.0331 0x0cdc  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\windows\System32\Drivers\BrUsbMdm.sys
21:18:49.0351 0x0cdc  BrUsbMdm - ok
21:18:49.0354 0x0cdc  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\windows\System32\Drivers\BrUsbSer.sys
21:18:49.0364 0x0cdc  BrUsbSer - ok
21:18:49.0368 0x0cdc  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\windows\system32\drivers\bthmodem.sys
21:18:49.0389 0x0cdc  BTHMODEM - ok
21:18:49.0451 0x0cdc  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv        C:\windows\system32\bthserv.dll
21:18:49.0477 0x0cdc  bthserv - ok
21:18:49.0481 0x0cdc  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
21:18:49.0507 0x0cdc  cdfs - ok
21:18:49.0589 0x0cdc  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom          C:\windows\system32\DRIVERS\cdrom.sys
21:18:49.0601 0x0cdc  cdrom - ok
21:18:49.0612 0x0cdc  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc    C:\windows\System32\certprop.dll
21:18:49.0637 0x0cdc  CertPropSvc - ok
21:18:49.0641 0x0cdc  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\windows\system32\drivers\circlass.sys
21:18:49.0680 0x0cdc  circlass - ok
21:18:49.0711 0x0cdc  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\windows\system32\CLFS.sys
21:18:49.0726 0x0cdc  CLFS - ok
21:18:49.0800 0x0cdc  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:18:49.0811 0x0cdc  clr_optimization_v2.0.50727_32 - ok
21:18:49.0869 0x0cdc  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:18:49.0880 0x0cdc  clr_optimization_v2.0.50727_64 - ok
21:18:49.0939 0x0cdc  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:18:49.0950 0x0cdc  clr_optimization_v4.0.30319_32 - ok
21:18:49.0963 0x0cdc  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:18:49.0982 0x0cdc  clr_optimization_v4.0.30319_64 - ok
21:18:49.0991 0x0cdc  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\windows\system32\drivers\CmBatt.sys
21:18:50.0007 0x0cdc  CmBatt - ok
21:18:50.0050 0x0cdc  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\windows\system32\drivers\cmdide.sys
21:18:50.0061 0x0cdc  cmdide - ok
21:18:50.0119 0x0cdc  [ 84FC81FF9F291A0FC8D10933C1748F66, 46B6C64659A24C1D4917963FECEC2D6AED516C047762F0B4E67651CF8241A7D8 ] CM_VENDER_CMD  C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys
21:18:50.0127 0x0cdc  CM_VENDER_CMD - ok
21:18:50.0182 0x0cdc  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG            C:\windows\system32\Drivers\cng.sys
21:18:50.0205 0x0cdc  CNG - ok
21:18:50.0224 0x0cdc  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\windows\system32\drivers\compbatt.sys
21:18:50.0232 0x0cdc  Compbatt - ok
21:18:50.0246 0x0cdc  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\windows\system32\DRIVERS\CompositeBus.sys
21:18:50.0258 0x0cdc  CompositeBus - ok
21:18:50.0260 0x0cdc  COMSysApp - ok
21:18:50.0263 0x0cdc  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk        C:\windows\system32\drivers\crcdisk.sys
21:18:50.0271 0x0cdc  crcdisk - ok
21:18:50.0309 0x0cdc  [ 1CD76A83B9E8E9A5A3519B39E28354D9, F9931743B99820FFBFB13136DFFD92F86802D543F9D8478648CDC554FB38899D ] CryptSvc        C:\windows\system32\cryptsvc.dll
21:18:50.0336 0x0cdc  CryptSvc - ok
21:18:50.0369 0x0cdc  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\windows\system32\rpcss.dll
21:18:50.0421 0x0cdc  DcomLaunch - ok
21:18:50.0467 0x0cdc  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc      C:\windows\System32\defragsvc.dll
21:18:50.0506 0x0cdc  defragsvc - ok
21:18:50.0526 0x0cdc  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\windows\system32\Drivers\dfsc.sys
21:18:50.0559 0x0cdc  DfsC - ok
21:18:50.0585 0x0cdc  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\windows\system32\dhcpcore.dll
21:18:50.0628 0x0cdc  Dhcp - ok
21:18:50.0631 0x0cdc  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\windows\system32\drivers\discache.sys
21:18:50.0670 0x0cdc  discache - ok
21:18:50.0687 0x0cdc  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\windows\system32\drivers\disk.sys
21:18:50.0696 0x0cdc  Disk - ok
21:18:50.0713 0x0cdc  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\windows\System32\dnsrslvr.dll
21:18:50.0751 0x0cdc  Dnscache - ok
21:18:50.0759 0x0cdc  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc        C:\windows\System32\dot3svc.dll
21:18:50.0813 0x0cdc  dot3svc - ok
21:18:50.0836 0x0cdc  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS            C:\windows\system32\dps.dll
21:18:50.0877 0x0cdc  DPS - ok
21:18:50.0915 0x0cdc  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud        C:\windows\system32\drivers\drmkaud.sys
21:18:50.0935 0x0cdc  drmkaud - ok
21:18:50.0978 0x0cdc  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl        C:\windows\System32\drivers\dxgkrnl.sys
21:18:51.0007 0x0cdc  DXGKrnl - ok
21:18:51.0032 0x0cdc  [ 6BAFD9819D9FEC2EDBAEBC8493C711A4, 689A30C9F881D8C49F90A6C75DA816055B43B84776E815C1DE80B3933ADBB174 ] e1cexpress      C:\windows\system32\DRIVERS\e1c62x64.sys
21:18:51.0046 0x0cdc  e1cexpress - ok
21:18:51.0066 0x0cdc  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost        C:\windows\System32\eapsvc.dll
21:18:51.0103 0x0cdc  EapHost - ok
21:18:51.0194 0x0cdc  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv          C:\windows\system32\drivers\evbda.sys
21:18:51.0289 0x0cdc  ebdrv - ok
21:18:51.0355 0x0cdc  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] EFS            C:\windows\System32\lsass.exe
21:18:51.0411 0x0cdc  EFS - ok
21:18:51.0473 0x0cdc  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr        C:\windows\ehome\ehRecvr.exe
21:18:51.0506 0x0cdc  ehRecvr - ok
21:18:51.0516 0x0cdc  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched        C:\windows\ehome\ehsched.exe
21:18:51.0539 0x0cdc  ehSched - ok
21:18:51.0570 0x0cdc  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor        C:\windows\system32\drivers\elxstor.sys
21:18:51.0590 0x0cdc  elxstor - ok
21:18:51.0594 0x0cdc  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\windows\system32\drivers\errdev.sys
21:18:51.0605 0x0cdc  ErrDev - ok
21:18:51.0631 0x0cdc  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem    C:\windows\system32\es.dll
21:18:51.0680 0x0cdc  EventSystem - ok
21:18:51.0686 0x0cdc  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat          C:\windows\system32\drivers\exfat.sys
21:18:51.0716 0x0cdc  exfat - ok
21:18:51.0722 0x0cdc  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat        C:\windows\system32\drivers\fastfat.sys
21:18:51.0765 0x0cdc  fastfat - ok
21:18:51.0798 0x0cdc  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax            C:\windows\system32\fxssvc.exe
21:18:51.0842 0x0cdc  Fax - ok
21:18:51.0847 0x0cdc  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc            C:\windows\system32\drivers\fdc.sys
21:18:51.0865 0x0cdc  fdc - ok
21:18:51.0873 0x0cdc  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost        C:\windows\system32\fdPHost.dll
21:18:51.0900 0x0cdc  fdPHost - ok
21:18:51.0921 0x0cdc  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\windows\system32\fdrespub.dll
21:18:51.0948 0x0cdc  FDResPub - ok
21:18:51.0963 0x0cdc  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
21:18:51.0972 0x0cdc  FileInfo - ok
21:18:51.0975 0x0cdc  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace      C:\windows\system32\drivers\filetrace.sys
21:18:52.0009 0x0cdc  Filetrace - ok
21:18:52.0012 0x0cdc  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\windows\system32\drivers\flpydisk.sys
21:18:52.0034 0x0cdc  flpydisk - ok
21:18:52.0052 0x0cdc  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
21:18:52.0067 0x0cdc  FltMgr - ok
21:18:52.0115 0x0cdc  [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache      C:\windows\system32\FntCache.dll
21:18:52.0171 0x0cdc  FontCache - ok
21:18:52.0203 0x0cdc  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:18:52.0212 0x0cdc  FontCache3.0.0.0 - ok
21:18:52.0216 0x0cdc  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends      C:\windows\system32\drivers\FsDepends.sys
21:18:52.0224 0x0cdc  FsDepends - ok
21:18:52.0263 0x0cdc  [ 6C06701BF1DB05405804D7EB610991CE, 75DEB2204D9AC338ED7C4742BEFAFA0AFC7E42B2C1B54A57DF8A1AD097D9EC3E ] fssfltr        C:\windows\system32\DRIVERS\fssfltr.sys
21:18:52.0271 0x0cdc  fssfltr - ok
21:18:52.0343 0x0cdc  [ 4CE9DAC1518FF7E77BD213E6394B9D77, D7D0D29DF93AC7DC5F85E385EEB45306C7BD87ACA7AAC5A8D47893D120C32C03 ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
21:18:52.0404 0x0cdc  fsssvc - ok
21:18:52.0410 0x0cdc  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
21:18:52.0418 0x0cdc  Fs_Rec - ok
21:18:52.0451 0x0cdc  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
21:18:52.0465 0x0cdc  fvevol - ok
21:18:52.0504 0x0cdc  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\windows\system32\drivers\gagp30kx.sys
21:18:52.0514 0x0cdc  gagp30kx - ok
21:18:52.0597 0x0cdc  [ 28D0B60C58D1F734449E735E2C4FCE94, 8DF2706EB0F6383BA44961440FDAA93B3756E48994FBF4AB2B13CDA66A6F3C3F ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
21:18:52.0624 0x0cdc  GfExperienceService - ok
21:18:52.0662 0x0cdc  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc          C:\windows\System32\gpsvc.dll
21:18:52.0703 0x0cdc  gpsvc - ok
21:18:52.0730 0x0cdc  [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:18:52.0739 0x0cdc  gupdate - ok
21:18:52.0743 0x0cdc  [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:18:52.0751 0x0cdc  gupdatem - ok
21:18:52.0790 0x0cdc  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi        C:\windows\system32\DRIVERS\hamachi.sys
21:18:52.0798 0x0cdc  hamachi - ok
21:18:52.0901 0x0cdc  [ B2D769C3899865902706A924CED699C7, 0E80C639BB6EA4E4CCA537494E8F96CB921DEB91429FFD0E93BBE966EF792916 ] Hamachi2Svc    C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
21:18:52.0981 0x0cdc  Hamachi2Svc - ok
21:18:52.0998 0x0cdc  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\windows\system32\drivers\hcw85cir.sys
21:18:53.0026 0x0cdc  hcw85cir - ok
21:18:53.0051 0x0cdc  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
21:18:53.0078 0x0cdc  HdAudAddService - ok
21:18:53.0083 0x0cdc  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\windows\system32\DRIVERS\HDAudBus.sys
21:18:53.0102 0x0cdc  HDAudBus - ok
21:18:53.0104 0x0cdc  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt        C:\windows\system32\drivers\HidBatt.sys
21:18:53.0116 0x0cdc  HidBatt - ok
21:18:53.0120 0x0cdc  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\windows\system32\drivers\hidbth.sys
21:18:53.0149 0x0cdc  HidBth - ok
21:18:53.0163 0x0cdc  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr          C:\windows\system32\drivers\hidir.sys
21:18:53.0175 0x0cdc  HidIr - ok
21:18:53.0179 0x0cdc  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv        C:\windows\system32\hidserv.dll
21:18:53.0225 0x0cdc  hidserv - ok
21:18:53.0243 0x0cdc  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\windows\system32\drivers\hidusb.sys
21:18:53.0283 0x0cdc  HidUsb - ok
21:18:53.0306 0x0cdc  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\windows\system32\kmsvc.dll
21:18:53.0341 0x0cdc  hkmsvc - ok
21:18:53.0348 0x0cdc  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\windows\system32\ListSvc.dll
21:18:53.0380 0x0cdc  HomeGroupListener - ok
21:18:53.0401 0x0cdc  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\windows\system32\provsvc.dll
21:18:53.0415 0x0cdc  HomeGroupProvider - ok
21:18:53.0425 0x0cdc  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
21:18:53.0434 0x0cdc  HpSAMD - ok
21:18:53.0488 0x0cdc  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\windows\system32\drivers\HTTP.sys
21:18:53.0550 0x0cdc  HTTP - ok
21:18:53.0564 0x0cdc  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
21:18:53.0572 0x0cdc  hwpolicy - ok
21:18:53.0576 0x0cdc  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\windows\system32\DRIVERS\i8042prt.sys
21:18:53.0588 0x0cdc  i8042prt - ok
21:18:53.0614 0x0cdc  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV        C:\windows\system32\drivers\iaStorV.sys
21:18:53.0631 0x0cdc  iaStorV - ok
21:18:53.0684 0x0cdc  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc          C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:18:53.0711 0x0cdc  idsvc - ok
21:18:53.0735 0x0cdc  IEEtwCollectorService - ok
21:18:53.0738 0x0cdc  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp          C:\windows\system32\drivers\iirsp.sys
21:18:53.0746 0x0cdc  iirsp - ok
21:18:53.0809 0x0cdc  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\windows\System32\ikeext.dll
21:18:53.0866 0x0cdc  IKEEXT - ok
21:18:53.0966 0x0cdc  [ 62C93ABEC0F8A9A235BF7A86B9FC3A0C, 0347B4277D8DF1EA371676D5718222963894F3697AE75A5F3370FC31F4B566F6 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys
21:18:54.0057 0x0cdc  IntcAzAudAddService - ok
21:18:54.0092 0x0cdc  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\windows\system32\drivers\intelide.sys
21:18:54.0100 0x0cdc  intelide - ok
21:18:54.0126 0x0cdc  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\windows\system32\DRIVERS\intelppm.sys
21:18:54.0137 0x0cdc  intelppm - ok
21:18:54.0154 0x0cdc  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum      C:\windows\system32\ipbusenum.dll
21:18:54.0189 0x0cdc  IPBusEnum - ok
21:18:54.0192 0x0cdc  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
21:18:54.0226 0x0cdc  IpFilterDriver - ok
21:18:54.0270 0x0cdc  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\windows\System32\iphlpsvc.dll
21:18:54.0308 0x0cdc  iphlpsvc - ok
21:18:54.0313 0x0cdc  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV        C:\windows\system32\drivers\IPMIDrv.sys
21:18:54.0340 0x0cdc  IPMIDRV - ok
21:18:54.0344 0x0cdc  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT          C:\windows\system32\drivers\ipnat.sys
21:18:54.0380 0x0cdc  IPNAT - ok
21:18:54.0382 0x0cdc  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\windows\system32\drivers\irenum.sys
21:18:54.0420 0x0cdc  IRENUM - ok
21:18:54.0423 0x0cdc  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\windows\system32\drivers\isapnp.sys
21:18:54.0431 0x0cdc  isapnp - ok
21:18:54.0495 0x0cdc  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\windows\system32\drivers\msiscsi.sys
21:18:54.0508 0x0cdc  iScsiPrt - ok
21:18:54.0568 0x0cdc  [ 1DED0D0AA513E2A5862B20A520D3A1E1, F592F890B8B4F8A152ABE395AA851AE46AFC4C447DADB38816344F9E0C4826B9 ] JME Keyboard    C:\Windows\jmesoft\Service.exe
21:18:54.0585 0x0cdc  JME Keyboard - detected UnsignedFile.Multi.Generic ( 1 )
21:18:57.0347 0x0cdc  Detect skipped due to KSN trusted
21:18:57.0347 0x0cdc  JME Keyboard - ok
21:18:57.0350 0x0cdc  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\windows\system32\DRIVERS\kbdclass.sys
21:18:57.0359 0x0cdc  kbdclass - ok
21:18:57.0368 0x0cdc  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\windows\system32\DRIVERS\kbdhid.sys
21:18:57.0378 0x0cdc  kbdhid - ok
21:18:57.0408 0x0cdc  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] KeyIso          C:\windows\system32\lsass.exe
21:18:57.0455 0x0cdc  KeyIso - ok
21:18:57.0504 0x0cdc  [ 063C09DB965E3DFD6F4F08416F6DB8F5, 0BE015C59288397536B3941BA55EFE0CF06714BC43FF3A33A1D844B4E0F16097 ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
21:18:57.0514 0x0cdc  KSecDD - ok
21:18:57.0574 0x0cdc  [ 1FA627E63195BF3BF636BFEF0D7190D4, 794456605303F4916E81BE899E0B05CB070094E719ADA8BE8072A761E35CA8E9 ] KSecPkg        C:\windows\system32\Drivers\ksecpkg.sys
21:18:57.0586 0x0cdc  KSecPkg - ok
21:18:57.0590 0x0cdc  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk        C:\windows\system32\drivers\ksthunk.sys
21:18:57.0614 0x0cdc  ksthunk - ok
21:18:57.0652 0x0cdc  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm          C:\windows\system32\msdtckrm.dll
21:18:57.0689 0x0cdc  KtmRm - ok
21:18:57.0727 0x0cdc  [ 305BB2AC00D46542E0A653AB63F4ABB1, E3BE57A0EBB1194656D20C11688863A7864B06223419F688D82881F9F49604B6 ] LADF_CaptureOnly C:\windows\system32\DRIVERS\ladfGSCamd64.sys
21:18:57.0743 0x0cdc  LADF_CaptureOnly - ok
21:18:57.0752 0x0cdc  [ 28CDDC7D478A6313F55077416DCBD0DE, EE4174FC9444856DF0693D1A5F16EB88352A3B012AA82D49C462980703981A7A ] LADF_RenderOnly C:\windows\system32\DRIVERS\ladfGSRamd64.sys
21:18:57.0762 0x0cdc  LADF_RenderOnly - ok
21:18:57.0784 0x0cdc  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\windows\system32\srvsvc.dll
21:18:57.0826 0x0cdc  LanmanServer - ok
21:18:57.0844 0x0cdc  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
21:18:57.0881 0x0cdc  LanmanWorkstation - ok
21:18:57.0987 0x0cdc  [ 1D5C6790425CB6DBB1B3C2722C34E199, D8BCC31A443B77711A7CA468E754A73137C1CC47D6F3DA5BEE3735B654327B0C ] LBTServ        C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
21:18:58.0002 0x0cdc  LBTServ - ok
21:18:58.0046 0x0cdc  [ FA529FB35694C24BF98A9EF67C1CD9D0, 7B3C587C38CF13D514140F0A55E58997D6071D1DEFD97E274E3F490660AC6075 ] LGBusEnum      C:\windows\system32\drivers\LGBusEnum.sys
21:18:58.0053 0x0cdc  LGBusEnum - ok
21:18:58.0071 0x0cdc  [ 94B29CE153765E768F004FB3440BE2B0, E74C01CEBDA589CDDE35CBCBAA18700E3742DD3B48A90DB3630992467FFC5024 ] LGVirHid        C:\windows\system32\drivers\LGVirHid.sys
21:18:58.0078 0x0cdc  LGVirHid - ok
21:18:58.0095 0x0cdc  [ 96EB043E2843B5A87A486D0BC6921094, 0B339A18B2F536F12B2C1B4FEDEB3A815DC7F8E7B082144EE084B3E6ED067FBC ] LHidFilt        C:\windows\system32\DRIVERS\LHidFilt.Sys
21:18:58.0104 0x0cdc  LHidFilt - ok
21:18:58.0122 0x0cdc  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys
21:18:58.0159 0x0cdc  lltdio - ok
21:18:58.0183 0x0cdc  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc        C:\windows\System32\lltdsvc.dll
21:18:58.0221 0x0cdc  lltdsvc - ok
21:18:58.0254 0x0cdc  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts        C:\windows\System32\lmhsvc.dll
21:18:58.0280 0x0cdc  lmhosts - ok
21:18:58.0314 0x0cdc  [ DECDC94EE980974EDFE4663B28A127C1, 9546F6B6F049EAD3D503A18CA106A1716AFE46CA40769D3DB128A3C152E02D30 ] LMIGuardianSvc  C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
21:18:58.0327 0x0cdc  LMIGuardianSvc - ok
21:18:58.0331 0x0cdc  [ A5C1DA229B3B660BBF3BDC30ADBFBB61, B657092424C6BF418A6FA56353370C195D9CA67999B355E8EDD6AFCFD9FEF8E5 ] LMouFilt        C:\windows\system32\DRIVERS\LMouFilt.Sys
21:18:58.0339 0x0cdc  LMouFilt - ok
21:18:58.0376 0x0cdc  [ 926EBA26A8B49D1597751CED06B50862, 886FC610E379BD77146ADDC376D77437D88B593C7F1C3FEE2B93D934A67310F8 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
21:18:58.0388 0x0cdc  LMS - ok
21:18:58.0416 0x0cdc  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\windows\system32\drivers\lsi_fc.sys
21:18:58.0426 0x0cdc  LSI_FC - ok
21:18:58.0440 0x0cdc  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS        C:\windows\system32\drivers\lsi_sas.sys
21:18:58.0450 0x0cdc  LSI_SAS - ok
21:18:58.0453 0x0cdc  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\windows\system32\drivers\lsi_sas2.sys
21:18:58.0462 0x0cdc  LSI_SAS2 - ok
21:18:58.0478 0x0cdc  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\windows\system32\drivers\lsi_scsi.sys
21:18:58.0493 0x0cdc  LSI_SCSI - ok
21:18:58.0498 0x0cdc  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv          C:\windows\system32\drivers\luafv.sys
21:18:58.0524 0x0cdc  luafv - ok
21:18:58.0560 0x0cdc  [ 9659AA75AC920EF6393B8CF77E21D1B9, 76706516DF281B48ABB2A43CA81B6EA0551937BE1C21AEA0A522AA717C27FD0A ] LUsbFilt        C:\windows\system32\Drivers\LUsbFilt.Sys
21:18:58.0568 0x0cdc  LUsbFilt - ok
21:18:58.0581 0x0cdc  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc        C:\windows\system32\Mcx2Svc.dll
21:18:58.0607 0x0cdc  Mcx2Svc - ok
21:18:58.0610 0x0cdc  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas        C:\windows\system32\drivers\megasas.sys
21:18:58.0619 0x0cdc  megasas - ok
21:18:58.0637 0x0cdc  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\windows\system32\drivers\MegaSR.sys
21:18:58.0651 0x0cdc  MegaSR - ok
21:18:58.0701 0x0cdc  [ A6518DCC42F7A6E999BB3BEA8FD87567, 8A9AE992F93F37E0723761EA271A7E1AA8172702C471041A17324474FC96B9BC ] MEIx64          C:\windows\system32\DRIVERS\HECIx64.sys
21:18:58.0710 0x0cdc  MEIx64 - ok
21:18:58.0719 0x0cdc  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS          C:\windows\system32\mmcss.dll
21:18:58.0756 0x0cdc  MMCSS - ok
21:18:58.0759 0x0cdc  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem          C:\windows\system32\drivers\modem.sys
21:18:58.0783 0x0cdc  Modem - ok
21:18:58.0786 0x0cdc  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor        C:\windows\system32\DRIVERS\monitor.sys
21:18:58.0813 0x0cdc  monitor - ok
21:18:58.0816 0x0cdc  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\windows\system32\DRIVERS\mouclass.sys
21:18:58.0825 0x0cdc  mouclass - ok
21:18:58.0828 0x0cdc  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\windows\system32\DRIVERS\mouhid.sys
21:18:58.0839 0x0cdc  mouhid - ok
21:18:58.0878 0x0cdc  [ 87BCD1034CBF33537D4D4C251D39BA26, CB9DD235B62B79383F99873D75E26EEA5EE7914CA89E4B75992207F83420437F ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
21:18:58.0888 0x0cdc  mountmgr - ok
21:18:58.0964 0x0cdc  [ 269BDB3CB77EB77BABE2862BEAB1F208, EC693365C73D59244CB77E181042128A9901BA5C1109CD4F1B9A2008DF1F9582 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:18:58.0975 0x0cdc  MozillaMaintenance - ok
21:18:58.0981 0x0cdc  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\windows\system32\drivers\mpio.sys
21:18:58.0992 0x0cdc  mpio - ok
21:18:58.0995 0x0cdc  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
21:18:59.0022 0x0cdc  mpsdrv - ok
21:18:59.0070 0x0cdc  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\windows\system32\mpssvc.dll
21:18:59.0113 0x0cdc  MpsSvc - ok
21:18:59.0154 0x0cdc  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
21:18:59.0175 0x0cdc  MRxDAV - ok
21:18:59.0181 0x0cdc  [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
21:18:59.0218 0x0cdc  mrxsmb - ok
21:18:59.0226 0x0cdc  [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
21:18:59.0257 0x0cdc  mrxsmb10 - ok
21:18:59.0261 0x0cdc  [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
21:18:59.0286 0x0cdc  mrxsmb20 - ok
21:18:59.0328 0x0cdc  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\windows\system32\drivers\msahci.sys
21:18:59.0337 0x0cdc  msahci - ok
21:18:59.0353 0x0cdc  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm          C:\windows\system32\drivers\msdsm.sys
21:18:59.0364 0x0cdc  msdsm - ok
21:18:59.0379 0x0cdc  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC          C:\windows\System32\msdtc.exe
21:18:59.0393 0x0cdc  MSDTC - ok
21:18:59.0397 0x0cdc  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\windows\system32\drivers\Msfs.sys
21:18:59.0422 0x0cdc  Msfs - ok
21:18:59.0441 0x0cdc  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf      C:\windows\System32\drivers\mshidkmdf.sys
21:18:59.0465 0x0cdc  mshidkmdf - ok
21:18:59.0467 0x0cdc  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
21:18:59.0475 0x0cdc  msisadrv - ok
21:18:59.0491 0x0cdc  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI        C:\windows\system32\iscsiexe.dll
21:18:59.0530 0x0cdc  MSiSCSI - ok
21:18:59.0533 0x0cdc  msiserver - ok
21:18:59.0555 0x0cdc  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV        C:\windows\system32\drivers\MSKSSRV.sys
21:18:59.0579 0x0cdc  MSKSSRV - ok
21:18:59.0593 0x0cdc  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys
21:18:59.0622 0x0cdc  MSPCLOCK - ok
21:18:59.0624 0x0cdc  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM          C:\windows\system32\drivers\MSPQM.sys
21:18:59.0648 0x0cdc  MSPQM - ok
21:18:59.0657 0x0cdc  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC          C:\windows\system32\drivers\MsRPC.sys
21:18:59.0673 0x0cdc  MsRPC - ok
21:18:59.0678 0x0cdc  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\windows\system32\DRIVERS\mssmbios.sys
21:18:59.0704 0x0cdc  mssmbios - ok
21:18:59.0718 0x0cdc  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE          C:\windows\system32\drivers\MSTEE.sys
21:18:59.0744 0x0cdc  MSTEE - ok
21:18:59.0754 0x0cdc  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\windows\system32\drivers\MTConfig.sys
21:18:59.0777 0x0cdc  MTConfig - ok
21:18:59.0781 0x0cdc  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup            C:\windows\system32\Drivers\mup.sys
21:18:59.0797 0x0cdc  Mup - ok
21:18:59.0822 0x0cdc  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\windows\system32\qagentRT.dll
21:18:59.0862 0x0cdc  napagent - ok
21:18:59.0893 0x0cdc  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP    C:\windows\system32\DRIVERS\nwifi.sys
21:18:59.0913 0x0cdc  NativeWifiP - ok
21:18:59.0971 0x0cdc  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\windows\system32\drivers\ndis.sys
21:19:00.0001 0x0cdc  NDIS - ok
21:19:00.0019 0x0cdc  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap        C:\windows\system32\DRIVERS\ndiscap.sys
21:19:00.0044 0x0cdc  NdisCap - ok
21:19:00.0060 0x0cdc  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
21:19:00.0084 0x0cdc  NdisTapi - ok
21:19:00.0087 0x0cdc  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio        C:\windows\system32\DRIVERS\ndisuio.sys
21:19:00.0111 0x0cdc  Ndisuio - ok
21:19:00.0129 0x0cdc  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan        C:\windows\system32\DRIVERS\ndiswan.sys
21:19:00.0167 0x0cdc  NdisWan - ok
21:19:00.0171 0x0cdc  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy        C:\windows\system32\drivers\NDProxy.sys
21:19:00.0204 0x0cdc  NDProxy - ok
21:19:00.0207 0x0cdc  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS        C:\windows\system32\DRIVERS\netbios.sys
21:19:00.0252 0x0cdc  NetBIOS - ok
21:19:00.0259 0x0cdc  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT          C:\windows\system32\DRIVERS\netbt.sys
21:19:00.0296 0x0cdc  NetBT - ok
21:19:00.0330 0x0cdc  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] Netlogon        C:\windows\system32\lsass.exe
21:19:00.0352 0x0cdc  Netlogon - ok
21:19:00.0392 0x0cdc  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\windows\System32\netman.dll
21:19:00.0434 0x0cdc  Netman - ok
21:19:00.0479 0x0cdc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:19:00.0552 0x0cdc  NetMsmqActivator - ok
21:19:00.0556 0x0cdc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:19:00.0567 0x0cdc  NetPipeActivator - ok
21:19:00.0578 0x0cdc  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\windows\System32\netprofm.dll
21:19:00.0613 0x0cdc  netprofm - ok
21:19:00.0687 0x0cdc  [ B69D6BB680C85243AF0263B3E01D5E77, 526B5C0CCAE6BE2EFFF532930FF8198864EA032B6D9EFC680ABC55E10B6984B6 ] netr7364        C:\windows\system32\DRIVERS\netr7364.sys
21:19:00.0731 0x0cdc  netr7364 - ok
21:19:00.0736 0x0cdc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:19:00.0747 0x0cdc  NetTcpActivator - ok
21:19:00.0779 0x0cdc  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:19:00.0789 0x0cdc  NetTcpPortSharing - ok
21:19:00.0818 0x0cdc  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960        C:\windows\system32\drivers\nfrd960.sys
21:19:00.0827 0x0cdc  nfrd960 - ok
21:19:00.0864 0x0cdc  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\windows\System32\nlasvc.dll
21:19:00.0894 0x0cdc  NlaSvc - ok
21:19:00.0912 0x0cdc  [ 351533ACC2A069B94E80BBFC177E8FDF, 54B2749E0496ECC94CE65657627762B485CBC825767BAEDDAD0D2598820FFB9E ] npf            C:\windows\system32\drivers\npf.sys
21:19:00.0920 0x0cdc  npf - ok
21:19:00.0929 0x0cdc  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\windows\system32\drivers\Npfs.sys
21:19:00.0955 0x0cdc  Npfs - ok
21:19:00.0992 0x0cdc  [ B785BC959F7B0514971A317CA86A2628, A282E67035D024D08C9F70D19B17A3CA5FC0424AD37C8FA0912DEFBF340A8FB0 ] npusbio        C:\windows\system32\Drivers\npusbio_x64.sys
21:19:01.0027 0x0cdc  npusbio - ok
21:19:01.0046 0x0cdc  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi            C:\windows\system32\nsisvc.dll
21:19:01.0072 0x0cdc  nsi - ok
21:19:01.0075 0x0cdc  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
21:19:01.0098 0x0cdc  nsiproxy - ok
21:19:01.0170 0x0cdc  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\windows\system32\drivers\Ntfs.sys
21:19:01.0223 0x0cdc  Ntfs - ok
21:19:01.0243 0x0cdc  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\windows\system32\drivers\Null.sys
21:19:01.0266 0x0cdc  Null - ok
21:19:01.0304 0x0cdc  [ 786DB821BFD57C0551DBBE4F75384A7D, F956D636F834F2BA5F019E187FDB9CC33940363C75A60E53CD81310A4DB6A6AB ] nusb3hub        C:\windows\system32\DRIVERS\nusb3hub.sys
21:19:01.0329 0x0cdc  nusb3hub - ok
21:19:01.0334 0x0cdc  [ DAA8005CAF745042BB427A1ED7433354, 3019002F174783B76D5D8AA47F7A465B7FEC7C14235B70E5C9277FE534839226 ] nusb3xhc        C:\windows\system32\DRIVERS\nusb3xhc.sys
21:19:01.0352 0x0cdc  nusb3xhc - ok
21:19:01.0386 0x0cdc  [ 7E4355930B28C2798D9F09AB9F81151F, 941C730F3B75BDF99639E76350031EDD15F18D8D860F3B1282C28B62096E7717 ] NVHDA          C:\windows\system32\drivers\nvhda64v.sys
21:19:01.0397 0x0cdc  NVHDA - ok
21:19:01.0666 0x0cdc  [ ECC732D5185408FCC323E56D30170848, 7A7A6C410B65DBB1D59653598D7E5414054588BB88505BE68BFFF0378FD555F3 ] nvlddmkm        C:\windows\system32\DRIVERS\nvlddmkm.sys
21:19:01.0944 0x0cdc  nvlddmkm - ok
21:19:02.0039 0x0cdc  [ 93C82F365F9C0A2058A211E305A5CCFA, 1B3FA9122377CF8C982EEE8719E2E295E3D118AC15646ACAB3A5BF78E1EE7E70 ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
21:19:02.0074 0x0cdc  NvNetworkService - ok
21:19:02.0102 0x0cdc  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\windows\system32\drivers\nvraid.sys
21:19:02.0113 0x0cdc  nvraid - ok
21:19:02.0118 0x0cdc  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\windows\system32\drivers\nvstor.sys
21:19:02.0129 0x0cdc  nvstor - ok
21:19:02.0157 0x0cdc  [ 977C9F7656D07D36887814A7D570FE1A, 843032A0EB1A4B81E506F80C59E613F700A353DE2C3514566092E336FE608DAB ] NvStreamKms    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
21:19:02.0165 0x0cdc  NvStreamKms - ok
21:19:02.0182 0x0cdc  NvStreamSvc - ok
21:19:02.0225 0x0cdc  [ 2AF7D8BCD8912FC16AA15268CDCF2454, 3A2E5ADFC6213A6EA83F78026518EC7EE0DD4BBA7C210CB7A41007BB57DC0636 ] nvsvc          C:\windows\system32\nvvsvc.exe
21:19:02.0250 0x0cdc  nvsvc - ok
21:19:02.0279 0x0cdc  [ DBFE7B2DF103F74AE51840B3C5F25FE9, 436CAA417FD24BA870F117FA4BABA2AB694825795508BCFCC8C927CC2D5BBC5E ] nvvad_WaveExtensible C:\windows\system32\drivers\nvvad64v.sys
21:19:02.0287 0x0cdc  nvvad_WaveExtensible - ok
21:19:02.0291 0x0cdc  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\windows\system32\drivers\nv_agp.sys
21:19:02.0302 0x0cdc  nv_agp - ok
21:19:02.0306 0x0cdc  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\windows\system32\drivers\ohci1394.sys
21:19:02.0330 0x0cdc  ohci1394 - ok
21:19:02.0355 0x0cdc  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
21:19:02.0383 0x0cdc  p2pimsvc - ok
21:19:02.0410 0x0cdc  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\windows\system32\p2psvc.dll
21:19:02.0438 0x0cdc  p2psvc - ok
21:19:02.0471 0x0cdc  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport        C:\windows\system32\drivers\parport.sys
21:19:02.0483 0x0cdc  Parport - ok
21:19:02.0523 0x0cdc  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr        C:\windows\system32\drivers\partmgr.sys
21:19:02.0533 0x0cdc  partmgr - ok
21:19:02.0557 0x0cdc  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\windows\System32\pcasvc.dll
21:19:02.0598 0x0cdc  PcaSvc - ok
21:19:02.0629 0x0cdc  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci            C:\windows\system32\drivers\pci.sys
21:19:02.0641 0x0cdc  pci - ok
21:19:02.0665 0x0cdc  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\windows\system32\drivers\pciide.sys
21:19:02.0674 0x0cdc  pciide - ok
21:19:02.0690 0x0cdc  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\windows\system32\drivers\pcmcia.sys
21:19:02.0702 0x0cdc  pcmcia - ok
21:19:02.0705 0x0cdc  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw            C:\windows\system32\drivers\pcw.sys
21:19:02.0714 0x0cdc  pcw - ok
21:19:02.0742 0x0cdc  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\windows\system32\drivers\peauth.sys
21:19:02.0785 0x0cdc  PEAUTH - ok
21:19:02.0829 0x0cdc  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\windows\SysWow64\perfhost.exe
21:19:02.0847 0x0cdc  PerfHost - ok
21:19:02.0899 0x0cdc  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla            C:\windows\system32\pla.dll
21:19:02.0993 0x0cdc  pla - ok
21:19:03.0035 0x0cdc  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\windows\system32\umpnpmgr.dll
21:19:03.0075 0x0cdc  PlugPlay - ok
21:19:03.0087 0x0cdc  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg    C:\windows\system32\pnrpauto.dll
21:19:03.0111 0x0cdc  PNRPAutoReg - ok
21:19:03.0129 0x0cdc  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc        C:\windows\system32\pnrpsvc.dll
21:19:03.0145 0x0cdc  PNRPsvc - ok
21:19:03.0173 0x0cdc  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent    C:\windows\System32\ipsecsvc.dll
21:19:03.0217 0x0cdc  PolicyAgent - ok
21:19:03.0233 0x0cdc  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power          C:\windows\system32\umpo.dll
21:19:03.0269 0x0cdc  Power - ok
21:19:03.0284 0x0cdc  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys
21:19:03.0318 0x0cdc  PptpMiniport - ok
21:19:03.0347 0x0cdc  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor      C:\windows\system32\drivers\processr.sys
21:19:03.0358 0x0cdc  Processor - ok
21:19:03.0385 0x0cdc  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc        C:\windows\system32\profsvc.dll
21:19:03.0419 0x0cdc  ProfSvc - ok
21:19:03.0436 0x0cdc  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] ProtectedStorage C:\windows\system32\lsass.exe
21:19:03.0446 0x0cdc  ProtectedStorage - ok
21:19:03.0468 0x0cdc  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\windows\system32\DRIVERS\pacer.sys
21:19:03.0505 0x0cdc  Psched - ok
21:19:03.0576 0x0cdc  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\windows\system32\drivers\ql2300.sys
21:19:03.0630 0x0cdc  ql2300 - ok
21:19:03.0637 0x0cdc  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\windows\system32\drivers\ql40xx.sys
21:19:03.0647 0x0cdc  ql40xx - ok
21:19:03.0675 0x0cdc  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE          C:\windows\system32\qwave.dll
21:19:03.0695 0x0cdc  QWAVE - ok
21:19:03.0699 0x0cdc  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
21:19:03.0755 0x0cdc  QWAVEdrv - ok
21:19:03.0758 0x0cdc  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
21:19:03.0783 0x0cdc  RasAcd - ok
21:19:03.0819 0x0cdc  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn    C:\windows\system32\DRIVERS\AgileVpn.sys
21:19:03.0854 0x0cdc  RasAgileVpn - ok
21:19:03.0867 0x0cdc  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto        C:\windows\System32\rasauto.dll
21:19:03.0902 0x0cdc  RasAuto - ok
21:19:03.0907 0x0cdc  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp        C:\windows\system32\DRIVERS\rasl2tp.sys
21:19:03.0933 0x0cdc  Rasl2tp - ok
21:19:03.0952 0x0cdc  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\windows\System32\rasmans.dll
21:19:03.0985 0x0cdc  RasMan - ok
21:19:03.0989 0x0cdc  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys
21:19:04.0029 0x0cdc  RasPppoe - ok
21:19:04.0058 0x0cdc  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp        C:\windows\system32\DRIVERS\rassstp.sys
21:19:04.0083 0x0cdc  RasSstp - ok
21:19:04.0092 0x0cdc  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss          C:\windows\system32\DRIVERS\rdbss.sys
21:19:04.0136 0x0cdc  rdbss - ok
21:19:04.0139 0x0cdc  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\windows\system32\drivers\rdpbus.sys
21:19:04.0167 0x0cdc  rdpbus - ok
21:19:04.0178 0x0cdc  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\windows\system32\DRIVERS\RDPCDD.sys
21:19:04.0210 0x0cdc  RDPCDD - ok
21:19:04.0213 0x0cdc  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\windows\system32\drivers\rdpencdd.sys
21:19:04.0238 0x0cdc  RDPENCDD - ok
21:19:04.0252 0x0cdc  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\windows\system32\drivers\rdprefmp.sys
21:19:04.0277 0x0cdc  RDPREFMP - ok
21:19:04.0610 0x0cdc  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
21:19:04.0650 0x0cdc  RdpVideoMiniport - ok
21:19:04.0695 0x0cdc  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD          C:\windows\system32\drivers\RDPWD.sys
21:19:04.0736 0x0cdc  RDPWD - ok
21:19:04.0743 0x0cdc  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
21:19:04.0756 0x0cdc  rdyboost - ok
21:19:04.0789 0x0cdc  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\windows\System32\mprdim.dll
21:19:04.0828 0x0cdc  RemoteAccess - ok
21:19:04.0834 0x0cdc  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\windows\system32\regsvc.dll
21:19:04.0863 0x0cdc  RemoteRegistry - ok
21:19:04.0886 0x0cdc  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
21:19:04.0921 0x0cdc  RpcEptMapper - ok
21:19:04.0934 0x0cdc  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\windows\system32\locator.exe
21:19:04.0945 0x0cdc  RpcLocator - ok
21:19:04.0964 0x0cdc  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs          C:\windows\system32\rpcss.dll
21:19:04.0998 0x0cdc  RpcSs - ok
21:19:05.0005 0x0cdc  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys
21:19:05.0030 0x0cdc  rspndr - ok
21:19:05.0073 0x0cdc  [ 9BEB5F18A418FF70659CE2E356829568, 8E327A99E68B5F9028778F5845719D00C590882B8609AF66D97DA880D537C937 ] RSUSBSTOR      C:\windows\system32\Drivers\RtsUStor.sys
21:19:05.0084 0x0cdc  RSUSBSTOR - ok
21:19:05.0109 0x0cdc  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] SamSs          C:\windows\system32\lsass.exe
21:19:05.0120 0x0cdc  SamSs - ok
21:19:05.0150 0x0cdc  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
21:19:05.0161 0x0cdc  sbp2port - ok
21:19:05.0178 0x0cdc  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\windows\System32\SCardSvr.dll
21:19:05.0220 0x0cdc  SCardSvr - ok
21:19:05.0239 0x0cdc  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
21:19:05.0263 0x0cdc  scfilter - ok
21:19:05.0301 0x0cdc  [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule        C:\windows\system32\schedsvc.dll
21:19:05.0362 0x0cdc  Schedule - ok
21:19:05.0384 0x0cdc  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc    C:\windows\System32\certprop.dll
21:19:05.0409 0x0cdc  SCPolicySvc - ok
21:19:05.0523 0x0cdc  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\windows\System32\SDRSVC.dll
21:19:05.0701 0x0cdc  SDRSVC - ok
21:19:05.0808 0x0cdc  [ D777F1417D9BB9F66CD9D9C3B61F730F, 0CBD830EB9D2B0F1946131F20907793B2D68A3BCEEC3EA5416972149F73DC815 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
21:19:05.0844 0x0cdc  SDScannerService - ok
21:19:05.0909 0x0cdc  [ 68D6C7F99BC73B88954D844FCCBEB2A0, F746861B103C8BE8EA234B9FCFBBDD2412C79FB65F2F1E0F5E6EBC0B34905FF1 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
21:19:05.0952 0x0cdc  SDUpdateService - ok
21:19:05.0959 0x0cdc  [ 9B9B368A8FF5CAF91D7A333CF62CD2CC, A4AE7FFBBAF983BFDE15B521ED162CBC4E6FC85BCDB200C75D45878B3FFDFA68 ] SDWSCService    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
21:19:05.0969 0x0cdc  SDWSCService - ok
21:19:05.0994 0x0cdc  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\windows\system32\drivers\secdrv.sys
21:19:06.0018 0x0cdc  secdrv - ok
21:19:06.0039 0x0cdc  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\windows\system32\seclogon.dll
21:19:06.0065 0x0cdc  seclogon - ok
21:19:06.0069 0x0cdc  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\windows\System32\sens.dll
21:19:06.0096 0x0cdc  SENS - ok
21:19:06.0106 0x0cdc  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\windows\system32\sensrsvc.dll
21:19:06.0142 0x0cdc  SensrSvc - ok
21:19:06.0168 0x0cdc  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum        C:\windows\system32\drivers\serenum.sys
21:19:06.0179 0x0cdc  Serenum - ok
21:19:06.0183 0x0cdc  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\windows\system32\drivers\serial.sys
21:19:06.0208 0x0cdc  Serial - ok
21:19:06.0219 0x0cdc  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\windows\system32\drivers\sermouse.sys
21:19:06.0236 0x0cdc  sermouse - ok
21:19:06.0255 0x0cdc  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\windows\system32\sessenv.dll
21:19:06.0291 0x0cdc  SessionEnv - ok
21:19:06.0294 0x0cdc  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk        C:\windows\system32\drivers\sffdisk.sys
21:19:06.0306 0x0cdc  sffdisk - ok
21:19:06.0308 0x0cdc  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\windows\system32\drivers\sffp_mmc.sys
21:19:06.0344 0x0cdc  sffp_mmc - ok
21:19:06.0347 0x0cdc  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd        C:\windows\system32\drivers\sffp_sd.sys
21:19:06.0358 0x0cdc  sffp_sd - ok
21:19:06.0361 0x0cdc  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy        C:\windows\system32\drivers\sfloppy.sys
21:19:06.0374 0x0cdc  sfloppy - ok
21:19:06.0413 0x0cdc  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\windows\System32\ipnathlp.dll
21:19:06.0454 0x0cdc  SharedAccess - ok
21:19:06.0478 0x0cdc  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\windows\System32\shsvcs.dll
21:19:06.0521 0x0cdc  ShellHWDetection - ok
21:19:06.0539 0x0cdc  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\windows\system32\drivers\SiSRaid2.sys
21:19:06.0549 0x0cdc  SiSRaid2 - ok
21:19:06.0552 0x0cdc  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\windows\system32\drivers\sisraid4.sys
21:19:06.0562 0x0cdc  SiSRaid4 - ok
21:19:06.0592 0x0cdc  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb            C:\windows\system32\DRIVERS\smb.sys
21:19:06.0628 0x0cdc  Smb - ok
21:19:06.0642 0x0cdc  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\windows\System32\snmptrap.exe
21:19:06.0654 0x0cdc  SNMPTRAP - ok
21:19:06.0657 0x0cdc  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr          C:\windows\system32\drivers\spldr.sys
21:19:06.0665 0x0cdc  spldr - ok
21:19:06.0704 0x0cdc  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler        C:\windows\System32\spoolsv.exe
21:19:06.0754 0x0cdc  Spooler - ok
21:19:06.0848 0x0cdc  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\windows\system32\sppsvc.exe
21:19:06.0967 0x0cdc  sppsvc - ok
21:19:06.0975 0x0cdc  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify    C:\windows\system32\sppuinotify.dll
21:19:07.0002 0x0cdc  sppuinotify - ok
21:19:07.0043 0x0cdc  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv            C:\windows\system32\DRIVERS\srv.sys
21:19:07.0232 0x0cdc  srv - ok
21:19:07.0318 0x0cdc  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\windows\system32\DRIVERS\srv2.sys
21:19:07.0351 0x0cdc  srv2 - ok
21:19:07.0357 0x0cdc  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
21:19:07.0370 0x0cdc  srvnet - ok
21:19:07.0386 0x0cdc  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV        C:\windows\System32\ssdpsrv.dll
21:19:07.0416 0x0cdc  SSDPSRV - ok
21:19:07.0420 0x0cdc  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc        C:\windows\system32\sstpsvc.dll
21:19:07.0457 0x0cdc  SstpSvc - ok
21:19:07.0519 0x0cdc  [ EBAA82F7C9B97C0E450449178E007340, D470927CC216C4E3EA23236E6C6464187CD3A49C3A4A456F488FEC8E713EA31B ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
21:19:07.0539 0x0cdc  Steam Client Service - ok
21:19:07.0738 0x0cdc  [ 6213F20854FB987119503F9F91C70B9F, E1683753D192B154DBFE1FD03625A2A56F8576CE2A7619B41159B1C718C73B88 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
21:19:07.0753 0x0cdc  Stereo Service - ok
21:19:07.0771 0x0cdc  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\windows\system32\drivers\stexstor.sys
21:19:07.0782 0x0cdc  stexstor - ok
21:19:07.0815 0x0cdc  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\windows\System32\wiaservc.dll
21:19:07.0842 0x0cdc  stisvc - ok
21:19:07.0846 0x0cdc  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\windows\system32\DRIVERS\swenum.sys
21:19:07.0854 0x0cdc  swenum - ok
21:19:07.0885 0x0cdc  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv          C:\windows\System32\swprv.dll
21:19:07.0921 0x0cdc  swprv - ok
21:19:07.0987 0x0cdc  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain        C:\windows\system32\sysmain.dll
21:19:08.0090 0x0cdc  SysMain - ok
21:19:08.0096 0x0cdc  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\windows\System32\TabSvc.dll
21:19:08.0112 0x0cdc  TabletInputService - ok
21:19:08.0137 0x0cdc  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv        C:\windows\System32\tapisrv.dll
21:19:08.0169 0x0cdc  TapiSrv - ok
21:19:08.0179 0x0cdc  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS            C:\windows\System32\tbssvc.dll
21:19:08.0215 0x0cdc  TBS - ok
21:19:08.0291 0x0cdc  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip          C:\windows\system32\drivers\tcpip.sys
21:19:08.0355 0x0cdc  Tcpip - ok
21:19:08.0424 0x0cdc  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys
21:19:08.0488 0x0cdc  TCPIP6 - ok
21:19:08.0517 0x0cdc  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
21:19:08.0553 0x0cdc  tcpipreg - ok
21:19:08.0572 0x0cdc  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\windows\system32\drivers\tdpipe.sys
21:19:08.0593 0x0cdc  TDPIPE - ok
21:19:08.0596 0x0cdc  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP          C:\windows\system32\drivers\tdtcp.sys
21:19:08.0619 0x0cdc  TDTCP - ok
21:19:08.0647 0x0cdc  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx            C:\windows\system32\DRIVERS\tdx.sys
21:19:08.0684 0x0cdc  tdx - ok
21:19:08.0707 0x0cdc  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\windows\system32\DRIVERS\termdd.sys
21:19:08.0716 0x0cdc  TermDD - ok
21:19:08.0772 0x0cdc  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService    C:\windows\System32\termsrv.dll
21:19:08.0824 0x0cdc  TermService - ok
21:19:08.0828 0x0cdc  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\windows\system32\themeservice.dll
21:19:08.0844 0x0cdc  Themes - ok
21:19:08.0868 0x0cdc  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER    C:\windows\system32\mmcss.dll
21:19:08.0895 0x0cdc  THREADORDER - ok
21:19:08.0918 0x0cdc  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\windows\System32\trkwks.dll
21:19:08.0957 0x0cdc  TrkWks - ok
21:19:08.0994 0x0cdc  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
21:19:09.0030 0x0cdc  TrustedInstaller - ok
21:19:09.0065 0x0cdc  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\windows\system32\DRIVERS\tssecsrv.sys
21:19:09.0090 0x0cdc  tssecsrv - ok
21:19:09.0130 0x0cdc  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys
21:19:09.0164 0x0cdc  TsUsbFlt - ok
21:19:09.0196 0x0cdc  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD        C:\windows\system32\drivers\TsUsbGD.sys
21:19:09.0220 0x0cdc  TsUsbGD - ok
21:19:09.0268 0x0cdc  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys
21:19:09.0294 0x0cdc  tunnel - ok
21:19:09.0319 0x0cdc  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\windows\system32\drivers\uagp35.sys
21:19:09.0329 0x0cdc  uagp35 - ok
21:19:09.0346 0x0cdc  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\windows\system32\DRIVERS\udfs.sys
21:19:09.0376 0x0cdc  udfs - ok
21:19:09.0381 0x0cdc  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect      C:\windows\system32\UI0Detect.exe
21:19:09.0399 0x0cdc  UI0Detect - ok
21:19:09.0402 0x0cdc  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys
21:19:09.0412 0x0cdc  uliagpkx - ok
21:19:09.0419 0x0cdc  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus          C:\windows\system32\DRIVERS\umbus.sys
21:19:09.0435 0x0cdc  umbus - ok
21:19:09.0437 0x0cdc  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\windows\system32\drivers\umpass.sys
21:19:09.0447 0x0cdc  UmPass - ok
21:19:09.0557 0x0cdc  [ FDF92EC84FECEE834FB10A2A0A19BCDA, F81FCA3BEC10C84335DBAD9D2CDAB98C62252A864F23BDD482F97F86D5FA0B15 ] UNS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
21:19:09.0609 0x0cdc  UNS - ok
21:19:09.0628 0x0cdc  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\windows\System32\upnphost.dll
21:19:09.0673 0x0cdc  upnphost - ok
21:19:09.0717 0x0cdc  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\windows\system32\drivers\usbaudio.sys
21:19:09.0746 0x0cdc  usbaudio - ok
21:19:09.0775 0x0cdc  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp        C:\windows\system32\DRIVERS\usbccgp.sys
21:19:09.0823 0x0cdc  usbccgp - ok
21:19:09.0874 0x0cdc  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\windows\system32\drivers\usbcir.sys
21:19:09.0899 0x0cdc  usbcir - ok
21:19:09.0908 0x0cdc  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci        C:\windows\system32\drivers\usbehci.sys
21:19:09.0919 0x0cdc  usbehci - ok
21:19:09.0937 0x0cdc  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\windows\system32\DRIVERS\usbhub.sys
21:19:09.0954 0x0cdc  usbhub - ok
21:19:09.0968 0x0cdc  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci        C:\windows\system32\drivers\usbohci.sys
21:19:09.0986 0x0cdc  usbohci - ok
21:19:10.0003 0x0cdc  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\windows\system32\drivers\usbprint.sys
21:19:10.0028 0x0cdc  usbprint - ok
21:19:10.0032 0x0cdc  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR        C:\windows\system32\DRIVERS\USBSTOR.SYS
21:19:10.0060 0x0cdc  USBSTOR - ok
21:19:10.0073 0x0cdc  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci        C:\windows\system32\drivers\usbuhci.sys
21:19:10.0083 0x0cdc  usbuhci - ok
21:19:10.0093 0x0cdc  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms          C:\windows\System32\uxsms.dll
21:19:10.0120 0x0cdc  UxSms - ok
21:19:10.0154 0x0cdc  [ CA4FC33FB22D92368A0B221092B46374, 2FB8C496216E5D11627F7832B3B8ABE486E71DF4EC28EABE33F89847BFC5E591 ] VaultSvc        C:\windows\system32\lsass.exe
21:19:10.0177 0x0cdc  VaultSvc - ok
21:19:10.0363 0x0cdc  [ CD74DB141650A8E131F30250381E5A77, C3F6CC4FA70D73A0453126AD6FB1A8A285A6B66EC2C661D9B4F798F8D9CB3976 ] VBoxAswDrv      C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys
21:19:10.0376 0x0cdc  VBoxAswDrv - ok
21:19:10.0401 0x0cdc  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys
21:19:10.0410 0x0cdc  vdrvroot - ok
21:19:10.0453 0x0cdc  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds            C:\windows\System32\vds.exe
21:19:10.0489 0x0cdc  vds - ok
21:19:10.0506 0x0cdc  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga            C:\windows\system32\DRIVERS\vgapnp.sys
21:19:10.0518 0x0cdc  vga - ok
21:19:10.0520 0x0cdc  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave        C:\windows\System32\drivers\vga.sys
21:19:10.0554 0x0cdc  VgaSave - ok
21:19:10.0579 0x0cdc  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp          C:\windows\system32\drivers\vhdmp.sys
21:19:10.0591 0x0cdc  vhdmp - ok
21:19:10.0634 0x0cdc  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\windows\system32\drivers\viaide.sys
21:19:10.0645 0x0cdc  viaide - ok
21:19:10.0669 0x0cdc  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\windows\system32\drivers\volmgr.sys
21:19:10.0679 0x0cdc  volmgr - ok
21:19:10.0692 0x0cdc  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx        C:\windows\system32\drivers\volmgrx.sys
21:19:10.0708 0x0cdc  volmgrx - ok
21:19:10.0717 0x0cdc  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap        C:\windows\system32\drivers\volsnap.sys
21:19:10.0731 0x0cdc  volsnap - ok
21:19:10.0760 0x0cdc  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid        C:\windows\system32\drivers\vsmraid.sys
21:19:10.0771 0x0cdc  vsmraid - ok
21:19:10.0822 0x0cdc  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS            C:\windows\system32\vssvc.exe
21:19:10.0918 0x0cdc  VSS - ok
21:19:10.0923 0x0cdc  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\windows\System32\drivers\vwifibus.sys
21:19:10.0934 0x0cdc  vwifibus - ok
21:19:10.0951 0x0cdc  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time        C:\windows\system32\w32time.dll
21:19:11.0008 0x0cdc  W32Time - ok
21:19:11.0013 0x0cdc  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\windows\system32\drivers\wacompen.sys
21:19:11.0031 0x0cdc  WacomPen - ok
21:19:11.0048 0x0cdc  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\windows\system32\DRIVERS\wanarp.sys
21:19:11.0081 0x0cdc  WANARP - ok
21:19:11.0084 0x0cdc  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys
21:19:11.0108 0x0cdc  Wanarpv6 - ok
21:19:11.0150 0x0cdc  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\windows\system32\wbengine.exe
21:19:11.0231 0x0cdc  wbengine - ok
21:19:11.0250 0x0cdc  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\windows\System32\wbiosrvc.dll
21:19:11.0269 0x0cdc  WbioSrvc - ok
21:19:11.0278 0x0cdc  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc        C:\windows\System32\wcncsvc.dll
21:19:11.0336 0x0cdc  wcncsvc - ok
21:19:11.0339 0x0cdc  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
21:19:11.0378 0x0cdc  WcsPlugInService - ok
21:19:11.0381 0x0cdc  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\windows\system32\drivers\wd.sys
21:19:11.0390 0x0cdc  Wd - ok
21:19:11.0430 0x0cdc  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys
21:19:11.0456 0x0cdc  Wdf01000 - ok
21:19:11.0489 0x0cdc  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\windows\system32\wdi.dll
21:19:11.0521 0x0cdc  WdiServiceHost - ok
21:19:11.0525 0x0cdc  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost  C:\windows\system32\wdi.dll
21:19:11.0536 0x0cdc  WdiSystemHost - ok
21:19:11.0580 0x0cdc  [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient      C:\windows\System32\webclnt.dll
21:19:11.0618 0x0cdc  WebClient - ok
21:19:11.0643 0x0cdc  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\windows\system32\wecsvc.dll
21:19:11.0683 0x0cdc  Wecsvc - ok
21:19:11.0702 0x0cdc  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport  C:\windows\System32\wercplsupport.dll
21:19:11.0730 0x0cdc  wercplsupport - ok
21:19:11.0735 0x0cdc  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\windows\System32\WerSvc.dll
21:19:11.0781 0x0cdc  WerSvc - ok
21:19:11.0784 0x0cdc  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\windows\system32\DRIVERS\wfplwf.sys
21:19:11.0809 0x0cdc  WfpLwf - ok
21:19:11.0825 0x0cdc  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\windows\system32\drivers\wimmount.sys
21:19:11.0833 0x0cdc  WIMMount - ok
21:19:11.0854 0x0cdc  WinDefend - ok
21:19:11.0857 0x0cdc  WinHttpAutoProxySvc - ok
21:19:11.0892 0x0cdc  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt        C:\windows\system32\wbem\WMIsvc.dll
21:19:11.0922 0x0cdc  Winmgmt - ok
21:19:12.0000 0x0cdc  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM          C:\windows\system32\WsmSvc.dll
21:19:12.0067 0x0cdc  WinRM - ok
21:19:12.0099 0x0cdc  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc        C:\windows\System32\wlansvc.dll
21:19:12.0133 0x0cdc  Wlansvc - ok
21:19:12.0173 0x0cdc  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
21:19:12.0182 0x0cdc  wlcrasvc - ok
21:19:12.0292 0x0cdc  [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
21:19:12.0339 0x0cdc  wlidsvc - ok
21:19:12.0354 0x0cdc  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi        C:\windows\system32\drivers\wmiacpi.sys
21:19:12.0372 0x0cdc  WmiAcpi - ok
21:19:12.0392 0x0cdc  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe
21:19:12.0413 0x0cdc  wmiApSrv - ok
21:19:12.0427 0x0cdc  WMPNetworkSvc - ok
21:19:12.0437 0x0cdc  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\windows\System32\wpcsvc.dll
21:19:12.0469 0x0cdc  WPCSvc - ok
21:19:12.0484 0x0cdc  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll
21:19:12.0513 0x0cdc  WPDBusEnum - ok
21:19:12.0524 0x0cdc  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl        C:\windows\system32\drivers\ws2ifsl.sys
21:19:12.0549 0x0cdc  ws2ifsl - ok
21:19:12.0562 0x0cdc  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\windows\System32\wscsvc.dll
21:19:12.0587 0x0cdc  wscsvc - ok
21:19:12.0590 0x0cdc  WSearch - ok
21:19:12.0612 0x0cdc  [ 83575C43B2BFE9AB0661A7F957E843C0, 6FCE62721902A4F35F1A4CED8AF60A0346CFAB657ED92DE4CEFF19BDB830D32D ] wsvd            C:\windows\system32\DRIVERS\wsvd.sys
21:19:12.0622 0x0cdc  wsvd - ok
21:19:12.0734 0x0cdc  [ 0814A74C853F50B354F08F83DDA9F7FB, 0A63BAA8DE451B8C2C71FEF961718E769B9BAC305C76D24048C664CB27D0DF28 ] wuauserv        C:\windows\system32\wuaueng.dll
21:19:12.0859 0x0cdc  wuauserv - ok
21:19:12.0903 0x0cdc  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\windows\system32\drivers\WudfPf.sys
21:19:12.0927 0x0cdc  WudfPf - ok
21:19:12.0956 0x0cdc  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\windows\system32\DRIVERS\WUDFRd.sys
21:19:12.0969 0x0cdc  WUDFRd - ok
21:19:12.0985 0x0cdc  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc        C:\windows\System32\WUDFSvc.dll
21:19:12.0998 0x0cdc  wudfsvc - ok
21:19:13.0046 0x0cdc  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc        C:\windows\System32\wwansvc.dll
21:19:13.0081 0x0cdc  WwanSvc - ok
21:19:13.0113 0x0cdc  [ B3EEACF62445E24FBB2CD4B0FB4DB026, 2E5B6220094C47754233EDA59E6514CE47AC6C6879F367C72B2C02330EABE8E0 ] yukonw7        C:\windows\system32\DRIVERS\yk62x64.sys
21:19:13.0138 0x0cdc  yukonw7 - ok
21:19:13.0163 0x0cdc  ================ Scan global ===============================
21:19:13.0185 0x0cdc  [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\windows\system32\basesrv.dll
21:19:13.0222 0x0cdc  [ EA32F4EA3AE06EDD122FBCD5A489E457, C6E464170121D1714A367CFC80C5EA15D42AD34909039FDB114EAD3B878A47F6 ] C:\windows\system32\winsrv.dll
21:19:13.0234 0x0cdc  [ EA32F4EA3AE06EDD122FBCD5A489E457, C6E464170121D1714A367CFC80C5EA15D42AD34909039FDB114EAD3B878A47F6 ] C:\windows\system32\winsrv.dll
21:19:13.0261 0x0cdc  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\windows\system32\sxssrv.dll
21:19:13.0291 0x0cdc  [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\windows\system32\services.exe
21:19:13.0299 0x0cdc  [ Global ] - ok
21:19:13.0299 0x0cdc  ================ Scan MBR ==================================
21:19:13.0305 0x0cdc  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:19:13.0598 0x0cdc  \Device\Harddisk0\DR0 - ok
21:19:13.0599 0x0cdc  ================ Scan VBR ==================================
21:19:13.0601 0x0cdc  [ 54A669CDAFC92D8594E686EBEB181E15 ] \Device\Harddisk0\DR0\Partition1
21:19:13.0667 0x0cdc  \Device\Harddisk0\DR0\Partition1 - ok
21:19:13.0669 0x0cdc  [ 62387665262F614494BE9CE4179E180A ] \Device\Harddisk0\DR0\Partition2
21:19:13.0722 0x0cdc  \Device\Harddisk0\DR0\Partition2 - ok
21:19:13.0722 0x0cdc  ================ Scan generic autorun ======================
21:19:14.0049 0x0cdc  [ 45E702A7E81E81EB87F6E7A4B9643E42, CBD228AAF64712D80DD1FB5A029D6D8BCA88C955480042AAA17F59A39E5AF2A4 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
21:19:14.0248 0x0cdc  RtHDVCpl - ok
21:19:14.0306 0x0cdc  [ 3FB4E7E2069F0FD9E15ABC18D605E427, 2FFC218E575DA9E8C86E468227B302752C73EA3246CC0A599D7BCC41ED404F4D ] C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe
21:19:14.0318 0x0cdc  UpdatePRCShortCut - ok
21:19:14.0662 0x0cdc  [ AC5406D1A6C19D83F92FA22697F3F072, 592BD212F1C0F6FE8605328F2D4A3EA360FF74B42E467E7ED201492A800181C8 ] C:\Program Files\Logitech Gaming Software\LCore.exe
21:19:14.0896 0x0cdc  Launch LCore - ok
21:19:15.0024 0x0cdc  [ 2433692BFC2631DC28B0705C1B760FF2, BBDE902F984E0968A3062F3EEA624E804B03095C67C280CDA4E85D02F46B7CDC ] C:\Program Files\Logitech\SetPointP\SetPoint.exe
21:19:15.0084 0x0cdc  EvtMgr6 - ok
21:19:15.0168 0x0cdc  [ 059E588FDF6B7E83227D45D026D21874, 211B5E85D84562E11F3A676686E7C716BB59912F7764A49D9164277EB3991AC3 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
21:19:15.0220 0x0cdc  NvBackend - ok
21:19:15.0239 0x0cdc  [ DD81D91FF3B0763C392422865C9AC12E, F5691B8F200E3196E6808E932630E862F8F26F31CD949981373F23C9D87DB8B9 ] C:\windows\system32\rundll32.exe
21:19:15.0260 0x0cdc  ShadowPlay - ok
21:19:15.0292 0x0cdc  [ 1F6BA41827A6262F668B436B6A5D9317, 56C46EC22C9DE35E340D8DFBBDF01F580B7C86C28BFAC4E3C358D7EC67B2FA81 ] C:\windows\jmesoft\hotkey.exe
21:19:15.0307 0x0cdc  jmekey - detected UnsignedFile.Multi.Generic ( 1 )
21:19:18.0025 0x0cdc  Detect skipped due to KSN trusted
21:19:18.0025 0x0cdc  jmekey - ok
21:19:18.0119 0x0cdc  [ 69920C35DF3B358232927CC9748A8BCA, 6F062CB19A4414B76F467331BE09EAB1CD151E2B301DCC0B024F1387E7B2AB45 ] C:\Windows\jmesoft\ServiceLoader.exe
21:19:18.0148 0x0cdc  jmesoft - detected UnsignedFile.Multi.Generic ( 1 )
21:19:28.0191 0x0cdc  jmesoft ( UnsignedFile.Multi.Generic ) - warning
21:19:32.0006 0x0cdc  [ 51C8885B6A00904C0252704C9FB0F43A, BF2F58E6697DB10F3D6FB3859FADC2CE1D3CDD318E487E02FDC2BE171AF6CA29 ] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
21:19:32.0014 0x0cdc  NUSB3MON - ok
21:19:32.0020 0x0cdc  [ 3FB4E7E2069F0FD9E15ABC18D605E427, 2FFC218E575DA9E8C86E468227B302752C73EA3246CC0A599D7BCC41ED404F4D ] C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe
21:19:32.0031 0x0cdc  UpdatePRCShortCut - ok
21:19:32.0157 0x0cdc  [ B3E053ED10DD568A3B292241F1A74D32, 62606F78FF968D7DF3EF04CD146749B525AEC9C438E9A897DA48F05577659DB2 ] C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe
21:19:32.0277 0x0cdc  Lenovo Registration - ok
21:19:32.0328 0x0cdc  [ ED70821F65B120FDBD76FCFF746FE219, D038CC5198099B2FE02F2789E6817E96E210E27CF6C0E8FF39E6746B31653DDE ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
21:19:32.0340 0x0cdc  SunJavaUpdateSched - ok
21:19:32.0464 0x0cdc  [ 7EE68A122ED08E4AAD8DA551E34D2515, B3C9AB270AF595D3DBAFBF4A312B96CBF00C16F0A03CCC86BE56825CD1EB7143 ] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
21:19:32.0581 0x0cdc  SDTray - ok
21:19:32.0703 0x0cdc  [ 30BDC4ED2EF99EB8CB6F0005B1DAA4AA, 45BA59198D99B60469CE2CD9DFC56EF94488B3AFDB7362B054373891F307D10A ] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
21:19:32.0838 0x0cdc  LogMeIn Hamachi Ui - ok
21:19:33.0021 0x0cdc  [ 938FA6F63B210FB8EF5A7B2FC1229431, 545DDA9C32DF14B50688F8192A345FE66D2DB3F8763ECBF85B38AC829E49E1D9 ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
21:19:33.0132 0x0cdc  AvastUI.exe - ok
21:19:33.0183 0x0cdc  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
21:19:33.0269 0x0cdc  Sidebar - ok
21:19:33.0292 0x0cdc  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
21:19:33.0312 0x0cdc  mctadmin - ok
21:19:33.0351 0x0cdc  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
21:19:33.0395 0x0cdc  Sidebar - ok
21:19:33.0400 0x0cdc  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
21:19:33.0415 0x0cdc  mctadmin - ok
21:19:33.0545 0x0cdc  [ 73CD25C93C41D174AFFCB140A10A8B1E, C0A481C54F8DF30D6B473215C60141B69FC812215DFCD07871E8F61A927D30DF ] C:\Program Files (x86)\Steam\steam.exe
21:19:33.0599 0x0cdc  Steam - ok
21:19:33.0720 0x0cdc  [ E74BF46DE94E62FA01C61EF084F7A7DD, 51CD74F0790C7FBDF0DEA16F1A582F07F4BCF7C9A87EA72B7D0FBC0B8EFD42EF ] C:\Users\Steffen\AppData\Roaming\Spotify\SpotifyWebHelper.exe
21:19:33.0763 0x0cdc  Spotify Web Helper - ok
21:19:33.0765 0x0cdc  Waiting for KSN requests completion. In queue: 12
21:19:34.0765 0x0cdc  Waiting for KSN requests completion. In queue: 12
21:19:35.0765 0x0cdc  Waiting for KSN requests completion. In queue: 12
21:19:36.0766 0x0cdc  Waiting for KSN requests completion. In queue: 12
21:19:37.0766 0x0cdc  Waiting for KSN requests completion. In queue: 12
21:19:38.0806 0x0cdc  AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 10.2.2214.845 ), 0x41000 ( enabled : updated )
21:19:38.0851 0x0cdc  Win FW state via NFP2: enabled
21:19:41.0548 0x0cdc  ============================================================
21:19:41.0548 0x0cdc  Scan finished
21:19:41.0548 0x0cdc  ============================================================
21:19:41.0554 0x00f4  Detected object count: 1
21:19:41.0554 0x00f4  Actual detected object count: 1
21:20:26.0920 0x00f4  jmesoft ( UnsignedFile.Multi.Generic ) - skipped by user
21:20:26.0920 0x00f4  jmesoft ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:20:39.0395 0x0c40  Deinitialize success
mbar.exe hat nix gefunden und wollte anschließend auch keinen restart...
tdsskiller.exe hat auf jeden fall einwas gefunden aber das hast du bestimmt schon gesehen


Danke und Gruß

Steffen

schrauber 22.04.2015 11:56
hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Q_wer 22.04.2015 17:05
Hallo Schrauber,

Hier Log von CmboFix

hatte noch ein paar Fehlermeldungen weiter unten beschrieben...

Combofix Logfile:
Code:
ComboFix 15-04-19.01 - Steffen 22.04.2015  17:12:26.1.8 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.4078.2137 [GMT 2:00]
ausgeführt von:: c:\users\Steffen\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
.
.
(((((((((((((((((((((((((((((((((((((((  Treiber/Dienste  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
(((((((((((((((((((((((  Dateien erstellt von 2015-03-22 bis 2015-04-22  ))))))))))))))))))))))))))))))
.
.
2015-04-22 15:22 . 2015-04-22 15:22        --------        d-----w-        c:\users\Default\AppData\Local\temp
2015-04-21 19:03 . 2015-04-21 19:03        --------        d-----w-        c:\programdata\Malwarebytes
2015-04-21 19:03 . 2015-04-21 19:15        --------        d-----w-        c:\programdata\Malwarebytes' Anti-Malware (portable)
2015-04-21 19:03 . 2015-04-21 19:03        136408        ----a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-04-21 19:02 . 2015-04-21 19:02        107736        ----a-w-        c:\windows\system32\drivers\mbamchameleon.sys
2015-04-21 16:43 . 2015-04-21 16:43        --------        d-----w-        c:\users\Steffen\AppData\Roaming\AVAST Software
2015-04-21 16:42 . 2015-04-21 16:42        268640        ----a-w-        c:\windows\system32\drivers\aswVmm.sys
2015-04-21 16:42 . 2015-04-21 16:42        136752        ----a-w-        c:\windows\system32\drivers\aswStm.sys
2015-04-21 16:42 . 2015-04-21 16:42        65736        ----a-w-        c:\windows\system32\drivers\aswRvrt.sys
2015-04-21 16:42 . 2015-04-21 16:42        441728        ----a-w-        c:\windows\system32\drivers\aswSP.sys
2015-04-21 16:42 . 2015-04-21 16:42        88408        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys
2015-04-21 16:42 . 2015-04-21 16:42        29168        ----a-w-        c:\windows\system32\drivers\aswHwid.sys
2015-04-21 16:42 . 2015-04-21 16:42        93528        ----a-w-        c:\windows\system32\drivers\aswRdr2.sys
2015-04-21 16:42 . 2015-04-21 16:41        1047320        ----a-w-        c:\windows\system32\drivers\aswSnx.sys
2015-04-21 16:42 . 2015-04-21 16:42        364472        ----a-w-        c:\windows\system32\aswBoot.exe
2015-04-21 16:42 . 2015-04-21 16:42        43112        ----a-w-        c:\windows\avastSS.scr
2015-04-21 16:41 . 2015-04-21 16:41        --------        d-----w-        c:\program files\AVAST Software
2015-04-21 15:45 . 2015-04-21 16:13        --------        d-----w-        C:\FRST
2015-04-21 15:32 . 2015-04-04 06:25        12032440        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{994F0D88-9BBF-4CA0-8607-A67A47C41A6F}\mpengine.dll
2015-04-20 15:11 . 2015-04-20 15:11        --------        d-----w-        c:\program files\7-Zip
2015-04-19 19:46 . 2015-04-19 19:46        --------        d-----w-        c:\users\Steffen\AppData\Local\Diagnostics
2015-04-18 10:33 . 2015-04-18 10:50        --------        d-----w-        c:\users\Steffen\AppData\Local\Arma 3 Launcher
2015-04-18 10:23 . 2015-04-18 10:23        --------        d-----w-        c:\users\Steffen\AppData\Roaming\Blender Foundation
2015-04-16 14:42 . 2015-04-16 14:42        --------        d-s---w-        c:\windows\system32\CompatTel
2015-04-16 14:42 . 2015-04-16 14:42        --------        d-----w-        c:\windows\system32\appraiser
2015-04-15 14:53 . 2015-03-17 05:22        5557696        ----a-w-        c:\windows\system32\ntoskrnl.exe
2015-04-15 14:52 . 2015-03-04 04:55        367552        ----a-w-        c:\windows\system32\clfs.sys
2015-04-15 14:52 . 2015-03-04 04:41        79360        ----a-w-        c:\windows\system32\clfsw32.dll
2015-04-15 14:52 . 2015-03-04 04:10        58880        ----a-w-        c:\windows\SysWow64\clfsw32.dll
2015-04-12 21:21 . 2015-04-12 21:21        --------        d-----w-        c:\program files (x86)\MSXML 4.0
2015-04-11 18:03 . 2015-04-11 18:20        --------        d-----w-        c:\users\Steffen\AppData\Roaming\Nero
2015-04-11 18:02 . 2015-04-11 18:02        --------        d-----w-        c:\program files (x86)\Nero
2015-04-11 18:02 . 2015-04-11 18:02        --------        d-----w-        c:\programdata\Nero
2015-04-11 18:02 . 2015-04-11 18:02        --------        d-----w-        c:\program files (x86)\Common Files\Nero
2015-04-11 17:23 . 2015-04-12 13:08        --------        d-----w-        c:\users\Steffen\AppData\Local\Spotify
2015-04-11 17:21 . 2015-04-12 13:08        --------        d-----w-        c:\users\Steffen\AppData\Roaming\Spotify
2015-04-10 15:47 . 2015-04-10 15:49        --------        d-----w-        c:\users\Steffen\AppData\Local\PboM
2015-04-10 15:47 . 2015-04-10 15:47        --------        d-----w-        c:\program files (x86)\PBO Manager v.1.4 beta
2015-04-10 15:43 . 2015-04-10 15:43        --------        d-----w-        c:\program files\Blender Foundation
2015-04-05 21:56 . 2015-04-05 21:56        --------        d-----w-        c:\program files\CPUID
2015-04-05 21:51 . 2015-04-05 22:07        --------        d-----w-        c:\users\Steffen\AppData\Roaming\Natural Selection 2
2015-04-04 15:20 . 2015-04-18 10:33        --------        d-----w-        c:\users\Steffen\AppData\Local\Bohemia_Interactive
2015-04-04 15:20 . 2015-04-04 15:20        --------        d-----w-        c:\users\Steffen\AppData\Local\Arma 3 Publisher
2015-04-04 14:08 . 2015-04-04 14:08        --------        d-s---w-        c:\windows\system32\GWX
2015-04-04 14:08 . 2015-04-04 14:08        --------        d-s---w-        c:\windows\SysWow64\GWX
2015-04-04 10:40 . 2015-04-13 20:13        --------        d-----w-        c:\users\Steffen\AppData\Local\gtk-2.0
2015-04-04 10:39 . 2015-04-10 15:44        --------        d-----w-        c:\users\Steffen\.thumbnails
2015-04-04 10:25 . 2015-04-04 10:25        --------        d-----w-        c:\users\Steffen\AppData\Local\fontconfig
2015-04-04 10:25 . 2015-04-13 20:13        --------        d-----w-        c:\users\Steffen\.gimp-2.8
2015-04-04 10:25 . 2015-04-04 10:25        --------        d-----w-        c:\users\Steffen\AppData\Local\gegl-0.2
2015-04-04 00:43 . 2015-04-04 00:43        --------        d-----w-        c:\program files\GIMP 2
2015-04-03 23:40 . 2015-04-03 23:40        --------        d-----w-        c:\users\Steffen\AppData\Local\CrashRpt
2015-03-28 22:06 . 2015-03-28 22:06        --------        d-----w-        c:\users\Steffen\AppData\Local\DCS
2015-03-27 21:13 . 2015-03-27 21:13        --------        d-----w-        c:\users\Steffen\AppData\Local\Gas Powered Games
2015-03-27 21:13 . 2015-03-27 21:13        --------        d-----w-        c:\program files (x86)\Sorian AI Mod
2015-03-27 21:05 . 2015-03-27 21:05        --------        d-----w-        c:\users\Steffen\AppData\Local\LogMeIn
2015-03-27 21:05 . 2015-03-27 21:05        --------        d-----w-        c:\programdata\LogMeIn
2015-03-27 21:05 . 2015-04-22 15:08        --------        d-----w-        c:\users\Steffen\AppData\Local\LogMeIn Hamachi
2015-03-27 21:02 . 2015-03-27 21:02        --------        d-----w-        c:\program files (x86)\LogMeIn Hamachi
2015-03-27 20:54 . 2015-03-27 20:54        --------        d-----w-        C:\temp
2015-03-27 20:54 . 2015-03-27 20:54        --------        d-----w-        c:\programdata\Media Center Programs
2015-03-27 20:43 . 2015-03-27 20:43        --------        d-----w-        c:\program files (x86)\THQ
2015-03-24 16:06 . 2015-03-24 16:06        --------        d-----w-        c:\users\Steffen\AppData\Roaming\OpenOffice
2015-03-24 16:05 . 2015-03-24 16:05        --------        d-----w-        c:\program files (x86)\OpenOffice 4
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-04-15 20:32 . 2015-03-18 16:22        128913832        ----a-w-        c:\windows\system32\MRT.exe
2015-04-14 20:19 . 2015-03-13 21:13        778416        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2015-04-14 20:19 . 2015-03-13 21:13        142512        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-17 04:56 . 2015-04-15 14:53        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2015-03-13 19:41 . 2015-03-18 18:39        997856        ----a-w-        c:\windows\system32\nvumdshimx.dll
2015-03-13 19:41 . 2015-03-18 18:39        878328        ----a-w-        c:\windows\SysWow64\nvumdshim.dll
2015-03-13 19:41 . 2015-03-18 18:39        18580512        ----a-w-        c:\windows\system32\nvwgf2umx.dll
2015-03-13 19:41 . 2015-03-18 18:39        13297144        ----a-w-        c:\windows\system32\nvopencl.dll
2015-03-13 19:41 . 2015-03-18 18:39        32114888        ----a-w-        c:\windows\system32\nvoglv64.dll
2015-03-13 19:41 . 2015-03-18 18:39        10775080        ----a-w-        c:\windows\SysWow64\nvopencl.dll
2015-03-13 19:41 . 2015-03-18 18:39        970384        ----a-w-        c:\windows\system32\NvIFR64.dll
2015-03-13 19:41 . 2015-03-18 18:39        944784        ----a-w-        c:\windows\system32\NvFBC64.dll
2015-03-13 19:41 . 2015-03-18 18:39        930448        ----a-w-        c:\windows\SysWow64\NvIFR.dll
2015-03-13 19:41 . 2015-03-18 18:39        909512        ----a-w-        c:\windows\SysWow64\NvFBC.dll
2015-03-13 19:41 . 2015-03-18 18:39        354112        ----a-w-        c:\windows\system32\nvoglshim64.dll
2015-03-13 19:41 . 2015-03-18 18:39        306208        ----a-w-        c:\windows\SysWow64\nvoglshim32.dll
2015-03-13 19:41 . 2015-03-18 18:39        24775368        ----a-w-        c:\windows\SysWow64\nvoglv32.dll
2015-03-13 19:41 . 2015-03-18 18:39        1896136        ----a-w-        c:\windows\system32\nvdispco6434788.dll
2015-03-13 19:41 . 2015-03-18 18:39        178512        ----a-w-        c:\windows\system32\nvinitx.dll
2015-03-13 19:41 . 2015-03-18 18:39        164568        ----a-w-        c:\windows\SysWow64\nvinit.dll
2015-03-13 19:41 . 2015-03-18 18:39        1557648        ----a-w-        c:\windows\system32\nvdispgenco6434788.dll
2015-03-13 19:41 . 2015-03-18 18:39        10262160        ----a-w-        c:\windows\system32\drivers\nvlddmkm.sys
2015-03-13 19:41 . 2015-03-18 18:39        3611792        ----a-w-        c:\windows\system32\nvcuvid.dll
2015-03-13 19:41 . 2015-03-18 18:39        3249352        ----a-w-        c:\windows\SysWow64\nvcuvid.dll
2015-03-13 19:41 . 2015-03-18 18:39        13210080        ----a-w-        c:\windows\system32\nvcuda.dll
2015-03-13 19:41 . 2015-03-18 18:39        10715864        ----a-w-        c:\windows\SysWow64\nvcuda.dll
2015-03-13 19:41 . 2015-03-18 18:39        25460880        ----a-w-        c:\windows\system32\nvcompiler.dll
2015-03-13 19:41 . 2015-03-18 18:39        20466376        ----a-w-        c:\windows\SysWow64\nvcompiler.dll
2015-03-13 19:41 . 2015-03-13 17:32        16022016        ----a-w-        c:\windows\SysWow64\nvwgf2um.dll
2015-03-13 19:41 . 2015-03-13 17:32        3303448        ----a-w-        c:\windows\system32\nvapi64.dll
2015-03-13 19:41 . 2015-03-13 17:32        2906928        ----a-w-        c:\windows\SysWow64\nvapi.dll
2015-03-13 19:41 . 2015-03-13 14:35        17258024        ----a-w-        c:\windows\system32\nvd3dumx.dll
2015-03-13 19:41 . 2015-03-13 14:35        14121624        ----a-w-        c:\windows\SysWow64\nvd3dum.dll
2015-03-13 17:47 . 2010-06-24 18:33        23256        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2015-03-13 17:22 . 2015-03-13 17:22        98216        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-03-13 16:49 . 2015-03-13 16:49        194048        ----a-w-        c:\windows\SysWow64\elshyph.dll
2015-03-13 16:49 . 2015-03-13 16:49        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe
2015-03-13 16:49 . 2015-03-13 16:49        645120        ----a-w-        c:\windows\SysWow64\jsIntl.dll
2015-03-13 16:49 . 2015-03-13 16:49        62464        ----a-w-        c:\windows\SysWow64\tdc.ocx
2015-03-13 16:49 . 2015-03-13 16:49        24576        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2015-03-13 16:49 . 2015-03-13 16:49        235008        ----a-w-        c:\windows\system32\elshyph.dll
2015-03-13 16:49 . 2015-03-13 16:49        182272        ----a-w-        c:\windows\SysWow64\msls31.dll
2015-03-13 16:49 . 2015-03-13 16:49        942592        ----a-w-        c:\windows\system32\jsIntl.dll
2015-03-13 16:49 . 2015-03-13 16:49        90112        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2015-03-13 16:49 . 2015-03-13 16:49        86016        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2015-03-13 16:49 . 2015-03-13 16:49        86016        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
2015-03-13 16:49 . 2015-03-13 16:49        81408        ----a-w-        c:\windows\system32\icardie.dll
2015-03-13 16:49 . 2015-03-13 16:49        77312        ----a-w-        c:\windows\system32\tdc.ocx
2015-03-13 16:49 . 2015-03-13 16:49        74240        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe
2015-03-13 16:49 . 2015-03-13 16:49        616104        ----a-w-        c:\windows\system32\ieapfltr.dat
2015-03-13 16:49 . 2015-03-13 16:49        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll
2015-03-13 16:49 . 2015-03-13 16:49        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll
2015-03-13 16:49 . 2015-03-13 16:49        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2015-03-13 16:49 . 2015-03-13 16:49        36352        ----a-w-        c:\windows\SysWow64\imgutil.dll
2015-03-13 16:49 . 2015-03-13 16:49        247808        ----a-w-        c:\windows\system32\msls31.dll
2015-03-13 16:49 . 2015-03-13 16:49        151552        ----a-w-        c:\windows\SysWow64\iexpress.exe
2015-03-13 16:49 . 2015-03-13 16:49        139264        ----a-w-        c:\windows\SysWow64\wextract.exe
2015-03-13 16:49 . 2015-03-13 16:49        13312        ----a-w-        c:\windows\SysWow64\mshta.exe
2015-03-13 16:49 . 2015-03-13 16:49        13312        ----a-w-        c:\windows\system32\msfeedssync.exe
2015-03-13 16:49 . 2015-03-13 16:49        131072        ----a-w-        c:\windows\system32\IEAdvpack.dll
2015-03-13 16:49 . 2015-03-13 16:49        111616        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll
2015-03-13 16:49 . 2015-03-13 16:49        105984        ----a-w-        c:\windows\system32\iesysprep.dll
2015-03-13 16:49 . 2015-03-13 16:49        774144        ----a-w-        c:\windows\system32\jscript.dll
2015-03-13 16:49 . 2015-03-13 16:49        62464        ----a-w-        c:\windows\system32\pngfilt.dll
2015-03-13 16:49 . 2015-03-13 16:49        48128        ----a-w-        c:\windows\system32\imgutil.dll
2015-03-13 16:49 . 2015-03-13 16:49        30208        ----a-w-        c:\windows\system32\licmgr10.dll
2015-03-13 16:49 . 2015-03-13 16:49        243200        ----a-w-        c:\windows\system32\webcheck.dll
2015-03-13 16:49 . 2015-03-13 16:49        235520        ----a-w-        c:\windows\system32\url.dll
2015-03-13 16:49 . 2015-03-13 16:49        167424        ----a-w-        c:\windows\system32\iexpress.exe
2015-03-13 16:49 . 2015-03-13 16:49        147968        ----a-w-        c:\windows\system32\occache.dll
2015-03-13 16:49 . 2015-03-13 16:49        143872        ----a-w-        c:\windows\system32\wextract.exe
2015-03-13 16:49 . 2015-03-13 16:49        13824        ----a-w-        c:\windows\system32\mshta.exe
2015-03-13 16:49 . 2015-03-13 16:49        135680        ----a-w-        c:\windows\system32\iepeers.dll
2015-03-13 16:49 . 2015-03-13 16:49        101376        ----a-w-        c:\windows\system32\inseng.dll
2015-03-13 16:48 . 2015-03-13 16:48        878080        ----a-w-        c:\windows\system32\advapi32.dll
2015-03-13 16:48 . 2015-03-13 16:48        859648        ----a-w-        c:\windows\system32\tdh.dll
2015-03-13 16:48 . 2015-03-13 16:48        640512        ----a-w-        c:\windows\SysWow64\advapi32.dll
2015-03-13 16:48 . 2015-03-13 16:48        619520        ----a-w-        c:\windows\SysWow64\tdh.dll
2015-03-13 16:47 . 2015-03-13 16:47        327168        ----a-w-        c:\windows\system32\mswsock.dll
2015-03-13 16:47 . 2015-03-13 16:47        231424        ----a-w-        c:\windows\SysWow64\mswsock.dll
2015-03-13 16:47 . 2015-03-13 16:47        68608        ----a-w-        c:\windows\system32\taskhost.exe
2015-03-13 16:45 . 2015-03-13 16:45        1887232        ----a-w-        c:\windows\system32\d3d11.dll
2015-03-13 16:45 . 2015-03-13 16:45        1505280        ----a-w-        c:\windows\SysWow64\d3d11.dll
2015-03-13 16:16 . 2012-06-14 23:08        6861968        ----a-w-        c:\windows\system32\nvcpl.dll
2015-03-13 16:16 . 2012-06-14 23:08        3526856        ----a-w-        c:\windows\system32\nvsvc64.dll
2015-03-13 16:16 . 2012-06-14 23:08        935056        ----a-w-        c:\windows\system32\nvvsvc.exe
2015-03-13 16:16 . 2012-06-14 23:08        62608        ----a-w-        c:\windows\system32\nvshext.dll
2015-03-13 16:16 . 2012-06-14 23:08        386248        ----a-w-        c:\windows\system32\nvmctray.dll
2015-03-13 16:16 . 2012-06-14 23:08        2559808        ----a-w-        c:\windows\system32\nvsvcr.dll
2015-03-13 15:38 . 2015-03-18 18:43        622224        ----a-w-        c:\windows\SysWow64\nvStreaming.exe
2015-03-13 15:11 . 2015-03-13 15:11        18960        ----a-w-        c:\windows\system32\drivers\LNonPnP.sys
2015-03-11 13:10 . 2012-06-14 23:08        4246327        ----a-w-        c:\windows\system32\nvcoproc.bin
2015-02-26 03:25 . 2015-03-14 08:55        3204096        ----a-w-        c:\windows\system32\win32k.sys
2015-02-24 02:17 . 2010-11-21 03:27        295552        ------w-        c:\windows\system32\MpSigStub.exe
2015-02-20 04:41 . 2015-03-13 18:18        41984        ----a-w-        c:\windows\system32\lpk.dll
2015-02-20 04:40 . 2015-03-13 18:18        100864        ----a-w-        c:\windows\system32\fontsub.dll
2015-02-20 04:40 . 2015-03-13 18:18        14336        ----a-w-        c:\windows\system32\dciman32.dll
2015-02-20 04:40 . 2015-03-13 18:18        46080        ----a-w-        c:\windows\system32\atmlib.dll
2015-02-20 04:13 . 2015-03-13 18:18        70656        ----a-w-        c:\windows\SysWow64\fontsub.dll
2015-02-20 04:13 . 2015-03-13 18:18        10240        ----a-w-        c:\windows\SysWow64\dciman32.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2015-04-13 2889408]
"Spotify Web Helper"="c:\users\Steffen\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-04-11 2018360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"jmekey"="c:\windows\jmesoft\hotkey.exe" [2011-06-08 118784]
"jmesoft"="c:\windows\jmesoft\ServiceLoader.exe" [2011-03-16 28672]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Lenovo Registration"="c:\program files (x86)\Lenovo Registration\LenovoReg.exe" [2011-07-14 4351712]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-03-07 335232]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2014-06-24 4101576]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2015-02-17 3978600]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-04-21 5511352]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WiFi Station.lnk - c:\program files (x86)\Hercules\WiFi Station\WiFiStation.exe -s [2015-3-13 99624]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 AVMPowerlineService;AVM FRITZ!Powerline Service;c:\program files (x86)\FRITZ!Powerline\PowerlineService.exe;c:\program files (x86)\FRITZ!Powerline\PowerlineService.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 JME Keyboard;JME Keyboard Driver;c:\windows\jmesoft\Service.exe;c:\windows\jmesoft\Service.exe [x]
R3 CM_VENDER_CMD;CM_VENDER_CMD;c:\program files\Common Files\Logitech\G430Install\CMVC64.sys;c:\program files\Common Files\Logitech\G430Install\CMVC64.sys [x]
R3 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [x]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x]
S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 netr7364;Hercules USB Wireless LAN Card Driver for Windows 7;c:\windows\system32\DRIVERS\netr7364.sys;c:\windows\SYSNATIVE\DRIVERS\netr7364.sys [x]
S3 npusbio;npusbio;c:\windows\system32\Drivers\npusbio_x64.sys;c:\windows\SYSNATIVE\Drivers\npusbio_x64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-04-15 14:57        988488        ----a-w-        c:\program files (x86)\Google\Chrome\Application\42.0.2311.90\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-04-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-13 20:19]
.
2015-04-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-15 14:51]
.
2015-04-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-15 14:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-04-21 16:42        722400        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-10-26 11543656]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2015-02-26 13318424]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2014-05-19 3100440]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-02-05 2585744]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-02-05 1514528]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Notify-SDWinLogon - SDWinLogon.dll
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} - c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
ShellIconOverlayIdentifiers-{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} - c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
ShellIconOverlayIdentifiers-{A759AFF6-5851-457D-A540-F4ECED148351} - c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
ShellIconOverlayIdentifiers-{1574C9EF-7D58-488F-B358-8B78C1538F51} - c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-04-22  17:54:24 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-04-22 15:54
.
Vor Suchlauf: 10 Verzeichnis(se), 504.766.156.800 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 506.357.497.856 Bytes frei
.
- - End Of File - - AB4A2AAF32CB83A49ECB36A28289D8FF

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31

Hatte mehrere dieser Fehlermeldung :

Zitat:
Unable to create a backup of the current registry file C:\Windows\System32\config\SYSTEM ! Continue restoration of this file? [Ja] [Nein]
Habe [Ja] gewählt

danach kam diese Fehlermeldung:

Zitat:
Error restoring C:\Windows\erdnt\subs\SYSTEM to C:\Windows\System32\config\SYSTEM ! Continue with the next file? [Ja] [Nein]
Habe dort wieder [Ja] gewählt.

Die selbe Meldung kam auch für:
  • C:\Windows\System32\config\SOFTWARE
  • Mindestens noch ein Pfad war dabei hab es leider übersprungen da ich dachte es sind viele mehr

Danke für all Ihre mühen

Gruß Steffen

schrauber 23.04.2015 11:23
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

Q_wer 23.04.2015 16:40
Hallo Schrauber,

##mbam##
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 23.04.2015
Suchlauf-Zeit: 16:57:41
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.04.23.05
Rootkit Datenbank: v2015.04.21.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Steffen

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 355489
Verstrichene Zeit: 8 Min, 25 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
##AdwCleaner##
AdwCleaner Logfile:
Code:
# AdwCleaner v4.201 - Bericht erstellt 23/04/2015 um 17:12:31
# Aktualisiert 08/04/2015 von Xplode
# Datenbank : 2015-04-08.1 [Lokal]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Steffen - STEFFEN-LENOVPC
# Gestarted von : C:\Users\Steffen\Desktop\AdwCleaner_4.201.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Partner

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17728


-\\ Mozilla Firefox v37.0.1 (x86 de)


-\\ Google Chrome v42.0.2311.90

[C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=HIP&o=102875&locale=de_NL&apn_uid=d2087424-cafd-4179-b684-8eca16e80234&apn_ptnrs=%5E6F&apn_sauid=66ED3BD0-07B7-45F4-9603-913961B4CBE9&apn_dtid=%5EYYYYYY%5EYY%5ENL&q={searchTerms}
[C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=9A7500FF925B0494&affID=121562&tsp=4922
[C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Homepage] : hxxp://www.ask.com/?l=dis&o=102875cr&gct=hp

*************************

AdwCleaner[R0].txt - [1703 Bytes] - [23/04/2015 17:10:06]
AdwCleaner[S0].txt - [1623 Bytes] - [23/04/2015 17:12:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1682  Bytes] ##########
--- --- ---

[/CODE]

##JRT##
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.6.1 (04.23.2015:1)
OS: Windows 7 Home Premium x64
Ran by Steffen on 23.04.2015 at 17:32:44,70
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23.04.2015 at 17:35:09,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
##FRST (FRST.txt)##

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
Ran by Steffen (administrator) on STEFFEN-LENOVPC on 23-04-2015 17:36:37
Running from C:\Users\Steffen\Desktop
Loaded Profiles: Steffen (Available profiles: Steffen)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11543656 2010-10-26] (Realtek Semiconductor)
HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [222504 2009-05-14] (CyberLink Corp.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-02-26] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [jmekey] => C:\windows\jmesoft\hotkey.exe [118784 2011-06-08] (Lenovo)
HKLM-x32\...\Run: [jmesoft] => C:\Windows\jmesoft\ServiceLoader.exe [28672 2011-03-16] ()
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe [222504 2009-05-14] (CyberLink Corp.)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-14] (Lenovo, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-04-21] (Avast Software s.r.o.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\Run: [Spotify Web Helper] => C:\Users\Steffen\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-04-11] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WiFi Station.lnk [2015-03-13]
ShortcutTarget: WiFi Station.lnk -> C:\Program Files (x86)\Hercules\WiFi Station\WiFiStation.exe (Hercules)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-21] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1470623560-831458022-899744248-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1470623560-831458022-899744248-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
HKU\S-1-5-21-1470623560-831458022-899744248-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-21] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-21] (Avast Software s.r.o.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: Rocket Beans TV Sendeplan für Firefox - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default\Extensions\javos-firebeans-rbtvfx@jetpack.xpi [2015-03-14]
FF Extension: Adblock Plus - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-03-13]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-21]

Chrome:
=======
CHR HomePage: Default ->
CHR StartupUrls: Default -> "https://de.yahoo.com?fr=hp-avast&type=prc265"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-03-13]
CHR Extension: (Avast Online Security) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-13]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Google Wallet) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-13]
CHR Extension: (Abstract-Blue) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa [2015-03-13]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-21]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-21] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-04-21] (Avast Software)
S2 AVMPowerlineService; C:\Program Files (x86)\FRITZ!Powerline\PowerlineService.exe [139264 2014-05-21] (AVM GmbH) [File not signed]
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S2 JME Keyboard; C:\Windows\jmesoft\Service.exe [32768 2011-03-16] () [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-02-16] (LogMeIn, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-21] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-21] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-21] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [441728 2015-04-21] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-21] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [268640 2015-04-21] ()
S3 CM_VENDER_CMD; C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [17104 2014-07-31] (Windows (R) Win 7 DDK provider)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [38400 2012-07-09] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-02-05] (NVIDIA Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-21] (Avast Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-23 17:36 - 2015-04-23 17:37 - 00017079 _____ () C:\Users\Steffen\Desktop\FRST.txt
2015-04-23 17:35 - 2015-04-23 17:35 - 00000602 _____ () C:\Users\Steffen\Desktop\JRT.txt
2015-04-23 17:32 - 2015-04-23 17:32 - 00000207 _____ () C:\windows\tweaking.com-regbackup-STEFFEN-LENOVPC-Windows-7-Home-Premium-(64-bit).dat
2015-04-23 17:32 - 2015-04-23 17:32 - 00000000 ____D () C:\RegBackup
2015-04-23 17:31 - 2015-04-08 22:32 - 00560968 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe
2015-04-23 17:30 - 2015-04-09 02:58 - 00078480 _____ (Khronos Group) C:\windows\system32\OpenCL.dll
2015-04-23 17:30 - 2015-04-09 02:58 - 00066704 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 06841488 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 03478344 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 02558608 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 00936264 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
2015-04-23 17:30 - 2015-04-08 23:30 - 00385168 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 00062608 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll
2015-04-23 17:30 - 2015-04-08 19:52 - 04336074 _____ () C:\windows\system32\nvcoproc.bin
2015-04-23 17:28 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6435012.dll
2015-04-23 17:28 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6435012.dll
2015-04-23 17:28 - 2015-04-09 02:58 - 01540240 _____ (NVIDIA Corporation) C:\windows\system32\nvhdagenco6420103.dll
2015-04-23 17:28 - 2015-04-09 02:58 - 00195728 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvhda64v.sys
2015-04-23 17:28 - 2015-04-09 02:58 - 00030536 _____ (NVIDIA Corporation) C:\windows\system32\nvhdap64.dll
2015-04-23 17:27 - 2015-04-23 17:27 - 00000000 __SHD () C:\Users\Steffen\AppData\Local\EmieUserList
2015-04-23 17:27 - 2015-04-23 17:27 - 00000000 __SHD () C:\Users\Steffen\AppData\Local\EmieSiteList
2015-04-23 17:27 - 2015-04-23 17:27 - 00000000 __SHD () C:\Users\Steffen\AppData\Local\EmieBrowserModeList
2015-04-23 17:27 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 17176128 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 14617288 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 12689592 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys
2015-04-23 17:27 - 2015-04-09 02:58 - 03317344 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 02935416 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\windows\system32\nvumdshimx.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvumdshim.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\windows\system32\nvinitx.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvinit.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00029329 _____ () C:\windows\system32\nvinfo.pb
2015-04-23 17:16 - 2015-04-23 17:17 - 02685470 _____ (Thisisu) C:\Users\Steffen\Desktop\JRT.exe
2015-04-23 17:16 - 2015-04-23 17:16 - 00001762 _____ () C:\Users\Steffen\Desktop\AdwCleaner[S0].txt
2015-04-23 17:10 - 2015-04-23 17:12 - 00000000 ____D () C:\AdwCleaner
2015-04-23 17:08 - 2015-04-23 17:08 - 02217984 _____ () C:\Users\Steffen\Desktop\AdwCleaner_4.201.exe
2015-04-23 17:07 - 2015-04-23 17:07 - 00001210 _____ () C:\Users\Steffen\Desktop\mbam.txt
2015-04-23 16:55 - 2015-04-23 16:55 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-23 16:55 - 2015-04-23 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-23 16:55 - 2015-04-23 16:55 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-23 16:55 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-04-23 16:55 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-04-23 16:51 - 2015-04-23 16:53 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Steffen\Desktop\mbam-setup-2.1.6.1022.exe
2015-04-23 16:49 - 2015-04-23 17:36 - 00000000 ____D () C:\Users\Steffen\Desktop\Trojaner-Board
2015-04-22 17:10 - 2015-04-22 17:54 - 00000000 ____D () C:\Qoobox
2015-04-22 17:10 - 2015-04-22 17:52 - 00000000 ____D () C:\windows\erdnt
2015-04-22 17:10 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2015-04-22 17:10 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2015-04-22 17:10 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2015-04-21 21:03 - 2015-04-23 17:15 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-21 21:03 - 2015-04-23 16:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-21 21:03 - 2015-04-21 21:15 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-04-21 21:02 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-04-21 21:01 - 2015-04-21 21:16 - 00000000 ____D () C:\Users\Steffen\Desktop\mbar
2015-04-21 18:43 - 2015-04-21 18:43 - 00001922 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-21 18:43 - 2015-04-21 18:43 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\AVAST Software
2015-04-21 18:43 - 2015-04-21 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-04-21 18:42 - 2015-04-23 16:52 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2015-04-21 18:42 - 2015-04-21 18:42 - 00441728 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswSP.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00364472 _____ (Avast Software s.r.o.) C:\windows\system32\aswBoot.exe
2015-04-21 18:42 - 2015-04-21 18:42 - 00268640 _____ () C:\windows\system32\Drivers\aswVmm.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00136752 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswStm.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00093528 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswRdr2.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00088408 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswMonFlt.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00065736 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00043112 _____ (Avast Software s.r.o.) C:\windows\avastSS.scr
2015-04-21 18:42 - 2015-04-21 18:42 - 00029168 _____ () C:\windows\system32\Drivers\aswHwid.sys
2015-04-21 18:42 - 2015-04-21 18:41 - 01047320 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswSnx.sys
2015-04-21 18:41 - 2015-04-21 18:41 - 00000000 ____D () C:\Program Files\AVAST Software
2015-04-21 17:45 - 2015-04-23 17:36 - 00000000 ____D () C:\FRST
2015-04-21 17:44 - 2015-04-21 17:44 - 02099712 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2015-04-21 17:43 - 2015-04-21 17:43 - 00000000 _____ () C:\Users\Steffen\defogger_reenable
2015-04-20 17:12 - 2015-04-20 17:15 - 147571744 _____ (Avast Software s.r.o.) C:\Users\Steffen\Downloads\avast_free_antivirus_setup.exe
2015-04-20 17:11 - 2015-04-20 17:11 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-20 17:11 - 2015-04-20 17:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-04-20 17:11 - 2015-04-20 17:11 - 00000000 ____D () C:\Program Files\7-Zip
2015-04-18 12:33 - 2015-04-18 12:50 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3 Launcher
2015-04-18 12:23 - 2015-04-18 12:23 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Blender Foundation
2015-04-16 16:42 - 2015-04-16 16:42 - 00000000 ___SD () C:\windows\system32\CompatTel
2015-04-16 16:42 - 2015-04-16 16:42 - 00000000 ____D () C:\windows\system32\appraiser
2015-04-15 16:54 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-04-15 16:54 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-04-15 16:54 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-04-15 16:54 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-04-15 16:54 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-04-15 16:54 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-04-15 16:54 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-04-15 16:54 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-04-15 16:54 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-04-15 16:54 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-04-15 16:54 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-04-15 16:54 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-04-15 16:54 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-04-15 16:54 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-04-15 16:54 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe
2015-04-15 16:53 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-04-15 16:53 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-04-15 16:53 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-04-15 16:53 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-04-15 16:53 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-04-15 16:53 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-04-15 16:53 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-04-15 16:53 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-04-15 16:53 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-04-15 16:53 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-04-15 16:53 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-04-15 16:53 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-04-15 16:53 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-04-15 16:53 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-04-15 16:53 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-04-15 16:53 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-04-15 16:53 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-04-15 16:53 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-04-15 16:53 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-04-15 16:53 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-04-15 16:53 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 16:53 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-04-15 16:53 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-04-15 16:53 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-04-15 16:53 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-04-15 16:53 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-04-15 16:53 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-04-15 16:53 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-04-15 16:53 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-04-15 16:53 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-04-15 16:53 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-04-15 16:53 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-04-15 16:53 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-04-15 16:53 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-04-15 16:53 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-04-15 16:53 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-04-15 16:53 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-04-15 16:53 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-04-15 16:53 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-04-15 16:53 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-04-15 16:53 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-04-15 16:53 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 16:53 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-04-15 16:53 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-04-15 16:53 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-04-15 16:53 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-04-15 16:53 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-04-15 16:53 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-04-15 16:53 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-04-15 16:53 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-04-15 16:53 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-04-15 16:53 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-04-15 16:53 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-04-15 16:53 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-04-15 16:53 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-04-15 16:53 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-04-15 16:53 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-04-15 16:53 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-04-15 16:53 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-04-15 16:53 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-04-15 16:53 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-04-15 16:53 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 16:53 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-04-15 16:53 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-04-15 16:53 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-04-15 16:53 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-04-15 16:53 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-04-15 16:53 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-04-15 16:53 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-04-15 16:53 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-04-15 16:53 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-04-15 16:53 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-04-15 16:53 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-04-15 16:53 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-04-15 16:53 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-04-15 16:53 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-04-15 16:53 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-04-15 16:53 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys
2015-04-15 16:52 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\windows\system32\clfs.sys
2015-04-15 16:52 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\clfsw32.dll
2015-04-15 16:52 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\windows\SysWOW64\clfsw32.dll
2015-04-14 22:31 - 2015-04-14 22:31 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-04-14 17:34 - 2015-04-14 17:35 - 00001212 _____ () C:\Users\Steffen\Desktop\QWR_Lights.sqf
2015-04-13 22:13 - 2015-04-13 22:13 - 00012583 _____ () C:\Users\Steffen\AppData\Local\recently-used.xbel
2015-04-12 23:22 - 2015-04-12 23:22 - 00288258 _____ () C:\windows\msxml4-KB973688-enu.LOG
2015-04-12 23:21 - 2015-04-12 23:21 - 00291458 _____ () C:\windows\msxml4-KB954430-enu.LOG
2015-04-12 23:21 - 2015-04-12 23:21 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2015-04-12 23:14 - 2015-04-12 23:15 - 00280617 _____ () C:\Users\Steffen\Documents\ts3_clientui-win64-1407159763-2015-04-12 23_14_59.942824.dmp
2015-04-11 23:33 - 2015-04-12 21:12 - 00001046 _____ () C:\Users\Steffen\Desktop\QWR_Bul.sqf
2015-04-11 20:03 - 2015-04-11 20:20 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\ProgramData\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\Program Files (x86)\Nero
2015-04-11 19:23 - 2015-04-12 15:08 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Spotify
2015-04-11 19:23 - 2015-04-11 19:23 - 00001808 _____ () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-04-11 19:21 - 2015-04-12 15:08 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Spotify
2015-04-10 17:51 - 2015-04-10 17:52 - 00000000 ____D () C:\Users\Steffen\Documents\BIS Core Engine
2015-04-10 17:47 - 2015-04-10 17:49 - 00000000 ____D () C:\Users\Steffen\AppData\Local\PboM
2015-04-10 17:47 - 2015-04-10 17:47 - 00002607 _____ () C:\Users\Public\Desktop\PBOManager v.1.4 beta.lnk
2015-04-10 17:47 - 2015-04-10 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PBO Manager
2015-04-10 17:47 - 2015-04-10 17:47 - 00000000 ____D () C:\Program Files (x86)\PBO Manager v.1.4 beta
2015-04-10 17:43 - 2015-04-10 17:43 - 00001897 _____ () C:\Users\Public\Desktop\Blender.lnk
2015-04-10 17:43 - 2015-04-10 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation
2015-04-10 17:43 - 2015-04-10 17:43 - 00000000 ____D () C:\Program Files\Blender Foundation
2015-04-05 23:56 - 2015-04-05 23:56 - 00000869 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2015-04-05 23:56 - 2015-04-05 23:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-04-05 23:56 - 2015-04-05 23:56 - 00000000 ____D () C:\Program Files\CPUID
2015-04-05 23:51 - 2015-04-06 00:07 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Natural Selection 2
2015-04-04 17:20 - 2015-04-18 12:33 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Bohemia_Interactive
2015-04-04 17:20 - 2015-04-04 17:20 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3 Publisher
2015-04-04 16:08 - 2015-04-04 16:08 - 00000000 ___SD () C:\windows\SysWOW64\GWX
2015-04-04 16:08 - 2015-04-04 16:08 - 00000000 ___SD () C:\windows\system32\GWX
2015-04-04 13:24 - 2015-04-05 15:41 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Bohemia_Interactive_a.s
2015-04-04 12:43 - 2015-04-04 12:43 - 00000222 _____ () C:\Users\Steffen\Desktop\Arma 3 Tools.url
2015-04-04 12:40 - 2015-04-13 22:13 - 00000000 ____D () C:\Users\Steffen\AppData\Local\gtk-2.0
2015-04-04 12:39 - 2015-04-10 17:44 - 00000000 ____D () C:\Users\Steffen\.thumbnails
2015-04-04 12:25 - 2015-04-13 22:13 - 00000000 ____D () C:\Users\Steffen\.gimp-2.8
2015-04-04 12:25 - 2015-04-04 12:25 - 00000000 ____D () C:\Users\Steffen\AppData\Local\gegl-0.2
2015-04-04 02:45 - 2015-04-04 02:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-04 02:43 - 2015-04-04 02:43 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-04-04 02:43 - 2015-04-04 02:43 - 00000000 ____D () C:\Program Files\GIMP 2
2015-04-04 01:40 - 2015-04-04 01:40 - 00000000 ____D () C:\Users\Steffen\AppData\Local\CrashRpt
2015-04-01 20:15 - 2009-06-10 23:00 - 00000824 _____ () C:\windows\system32\Drivers\etc\hosts.20150401-201532.backup
2015-03-29 00:06 - 2015-03-29 00:06 - 00000000 ____D () C:\Users\Steffen\AppData\Local\DCS
2015-03-28 15:03 - 2015-04-11 20:18 - 00000000 ____D () C:\Users\Steffen\Desktop\MusikStreams
2015-03-27 23:13 - 2015-03-29 15:51 - 00000000 ____D () C:\Users\Steffen\Documents\My Games
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Users\Steffen\Documents\Eigene Spiele
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Gas Powered Games
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Program Files (x86)\Sorian AI Mod
2015-03-27 23:05 - 2015-04-23 17:17 - 00000000 ____D () C:\Users\Steffen\AppData\Local\LogMeIn Hamachi
2015-03-27 23:05 - 2015-03-27 23:05 - 00000000 ____D () C:\Users\Steffen\AppData\Local\LogMeIn
2015-03-27 23:05 - 2015-03-27 23:05 - 00000000 ____D () C:\ProgramData\LogMeIn
2015-03-27 23:02 - 2015-03-27 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-03-27 23:02 - 2015-03-27 23:02 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2015-03-27 22:54 - 2015-04-23 17:31 - 00000000 ____D () C:\temp
2015-03-27 22:54 - 2015-03-27 22:54 - 00002596 _____ () C:\Users\Public\Desktop\Forged Alliance.lnk
2015-03-27 22:53 - 2015-03-27 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ
2015-03-27 22:43 - 2015-03-27 22:43 - 00000722 _____ () C:\windows\DXError.log
2015-03-27 22:43 - 2015-03-27 22:43 - 00000000 ____D () C:\Program Files (x86)\THQ
2015-03-25 00:01 - 2015-03-25 00:01 - 00278053 _____ () C:\Users\Steffen\Documents\ts3_clientui-win64-1407159763-2015-03-24 23_01_47.647175.dmp
2015-03-24 19:07 - 2015-04-12 21:11 - 00000675 _____ () C:\Users\Steffen\Desktop\QWR_Mir.sqf
2015-03-24 18:06 - 2015-03-24 18:06 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\OpenOffice
2015-03-24 18:05 - 2015-03-24 18:05 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2015-03-24 18:05 - 2015-03-24 18:05 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-03-24 18:05 - 2015-03-24 18:05 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-23 17:31 - 2015-03-13 19:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-04-23 17:31 - 2012-06-15 01:58 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-23 17:31 - 2012-06-15 01:08 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-04-23 17:31 - 2009-07-14 06:51 - 00049044 _____ () C:\windows\setupact.log
2015-04-23 17:30 - 2012-06-15 01:08 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-04-23 17:30 - 2012-06-15 01:07 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-04-23 17:30 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\Help
2015-04-23 17:23 - 2009-07-14 06:45 - 00020480 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-23 17:23 - 2009-07-14 06:45 - 00020480 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-23 17:19 - 2015-03-13 19:36 - 00001377 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-04-23 17:18 - 2015-03-13 23:13 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-04-23 17:18 - 2012-06-15 01:06 - 01967243 _____ () C:\windows\WindowsUpdate.log
2015-04-23 17:17 - 2015-03-13 17:03 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-23 17:14 - 2012-06-15 02:08 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-23 17:14 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-04-23 17:13 - 2010-11-21 05:47 - 01217380 _____ () C:\windows\PFRO.log
2015-04-23 16:56 - 2012-06-15 02:08 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-22 22:04 - 2015-03-13 17:13 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\TS3Client
2015-04-22 17:45 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2015-04-21 18:58 - 2015-03-13 19:21 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-21 18:40 - 2015-03-13 16:51 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-04-21 18:29 - 2012-06-15 01:48 - 00699416 _____ () C:\windows\system32\perfh007.dat
2015-04-21 18:29 - 2012-06-15 01:48 - 00149556 _____ () C:\windows\system32\perfc007.dat
2015-04-21 18:29 - 2009-07-14 07:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2015-04-21 17:43 - 2015-03-13 16:25 - 00000000 ____D () C:\Users\Steffen
2015-04-19 21:47 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF
2015-04-19 19:03 - 2015-03-14 20:33 - 00000000 ____D () C:\Users\Steffen\AppData\Local\CrashDumps
2015-04-19 17:51 - 2015-03-14 20:01 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\FileZilla
2015-04-19 17:51 - 2015-03-14 16:32 - 00000000 ____D () C:\Program Files (x86)\ArmA3Sync-1-4-58
2015-04-19 17:46 - 2015-03-14 20:00 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3
2015-04-18 17:22 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2015-04-16 22:29 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\AppCompat
2015-04-16 16:42 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-04-15 22:37 - 2012-06-15 02:02 - 01593956 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-04-15 22:35 - 2015-03-18 18:22 - 00000000 ____D () C:\windows\system32\MRT
2015-04-15 22:32 - 2015-03-18 18:22 - 128913832 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-04-14 22:19 - 2015-03-13 23:13 - 00778416 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-04-14 22:19 - 2015-03-13 23:13 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-14 22:19 - 2015-03-13 23:13 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-04-11 20:17 - 2015-03-22 23:22 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\vlc
2015-04-04 16:12 - 2015-03-13 22:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-01 20:11 - 2015-03-20 16:15 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-29 20:17 - 2015-03-14 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-03-29 20:17 - 2015-03-14 20:01 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-03-29 15:51 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-28 22:07 - 2011-02-15 12:41 - 00000000 ____D () C:\Program Files\Windows Journal
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\winrm
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\WCN
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\sysprep
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\Printing_Admin_Scripts
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\winrm
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\slmgr
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Setup
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\oobe
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\MUI
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\migwiz
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\com
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\sysprep
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Setup
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\oobe
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\migwiz
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-28 22:06 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\WCN
2015-03-28 22:06 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\Printing_Admin_Scripts
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\MUI
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\com
2015-03-28 05:44 - 2015-03-13 19:35 - 01316000 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll
2015-03-28 05:44 - 2015-03-13 19:35 - 01316000 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll
2015-03-28 05:43 - 2015-03-13 19:35 - 01756424 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll
2015-03-28 05:43 - 2015-03-13 19:35 - 01570672 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll
2015-03-27 22:43 - 2012-06-15 02:12 - 00167908 _____ () C:\windows\DirectX.log
2015-03-27 22:41 - 2012-06-15 01:05 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-25 17:36 - 2009-07-14 06:45 - 00289736 _____ () C:\windows\system32\FNTCACHE.DAT
2015-03-24 18:15 - 2015-03-13 16:28 - 00066904 _____ () C:\Users\Steffen\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Files in the root of some directories =======

2015-04-13 22:13 - 2015-04-13 22:13 - 0012583 _____ () C:\Users\Steffen\AppData\Local\recently-used.xbel
2012-06-15 02:04 - 2012-06-15 02:04 - 1914000 _____ (Adobe Systems Incorporated) C:\ProgramData\flashax10.exe

Files to move or delete:
====================
C:\ProgramData\flashax10.exe


Some content of TEMP:
====================
C:\Users\Steffen\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Steffen\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Steffen\AppData\Local\Temp\nvStInst.exe
C:\Users\Steffen\AppData\Local\Temp\Quarantine.exe
C:\Users\Steffen\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-18 17:14

==================== End Of Log ============================
--- --- ---


##FRST (Addition.txt)##
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015
Ran by Steffen at 2015-04-23 17:37:36
Running from C:\Users\Steffen\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Arma 3 Tools (HKLM-x32\...\Steam App 233800) (Version:  - Bohemia Interactive)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2214 - AVAST Software)
Blender (HKLM\...\Blender) (Version: 2.74 - Blender Foundation)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.72 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DCS World (HKLM-x32\...\Steam App 223750) (Version:  - Eagle Dynamics)
FileZilla Client 3.10.3 (HKLM-x32\...\FileZilla Client) (Version: 3.10.3 - Tim Kosse)
FRITZ!Powerline (HKLM-x32\...\{F9C9378B-78D5-4CC0-8683-B7915DFEA9C5}) (Version: 01.00.65 - AVM Berlin)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
Google Update Helper (x32 Version: 1.2.183.39 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPGNet (HKLM-x32\...\{C194D333-B84A-4BB7-B35E-060732D98DC4}) (Version: 1.0.0 - Gas Powered Games)
Hercules WiFi Station (HKLM-x32\...\{1157EAA9-33E6-43A3-8ECC-20518A2284F8}) (Version: 3.4.0.0 - Hercules)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Blacksilk USB Keyboard Driver (HKLM-x32\...\{B266E062-D6C5-485B-B426-51B152B041A6}) (Version: V1.4.11.0608 - Lenovo)
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.4 - Lenovo Inc.)
Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.2431 - CyberLink Corp.)
Lenovo Rescue System (Version: 3.0.2431 - CyberLink Corp.) Hidden
Lenovo Treiber- und Anwendungsinstallation (HKLM-x32\...\{45970CD1-D599-47D4-938F-3E9800D54ED1}) (Version: 5.10.3426 - Lenovo)
Life is Feudal: Your Own (HKLM-x32\...\Steam App 290080) (Version:  - Bitbox Ltd.)
Logitech G430 Driver (HKLM-x32\...\G430_Driver) (Version: 8.53.0.2 - Logitech)
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.177 - Logitech Inc.)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.319 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.319 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version:  - Microsoft Corporation)
Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Natural Selection 2 (HKLM-x32\...\Steam App 4920) (Version:  - Unknown Worlds Entertainment)
NaturalPoint USB Drivers x64 (HKLM\...\{B408139D-04D6-4464-A979-D335E48F7063}) (Version: 2.50.0000 - NaturalPoint)
Nero 9 Lite (HKLM-x32\...\{102fab7a-3c58-44de-9aba-f1b2d9282ada}) (Version:  - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PBO Manager v.1.4 beta (HKLM-x32\...\{0E3A79BF-E860-4371-8ABC-7AAEDD68DA0A}) (Version: 1.4.0 -  )
Planetary Annihilation (HKLM-x32\...\Steam App 233250) (Version:  - Uber Entertainment)
Play withSIX Windows client (HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\PlaywithSIX) (Version: 1.66.1146.4 - SIX Networks GmbH)
POSTAL 2 (HKLM-x32\...\Steam App 223470) (Version:  - Running With Scissors)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6230 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Sorian AI Mod 2.1.1 (HKLM-x32\...\Sorian AI Mod_is1) (Version:  - )
Spotify (HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\Spotify) (Version: 1.0.3.101.gbfa97dfe - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Supreme Commander - Forged Alliance (HKLM-x32\...\{31D95937-B237-405D-920C-A3EF4E482395}) (Version: 1.00.0000 - Gas Powered Games)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TrackIR 5 (HKLM-x32\...\{2f2e6053-043c-4d69-94d0-4d42304ea4ee}) (Version: 5.2.0200 - NaturalPoint)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1470623560-831458022-899744248-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()

==================== Restore Points  =========================

14-03-2015 10:56:37 Windows Update
14-03-2015 16:15:11 Installed 7-Zip 9.20 (x64 edition)
14-03-2015 17:34:12 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
14-03-2015 17:35:04 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
14-03-2015 17:37:24 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
14-03-2015 17:38:28 Microsoft Visual C++ 2005 Redistributable wird installiert
14-03-2015 17:40:05 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
14-03-2015 17:43:21 DirectX wurde installiert
14-03-2015 18:26:28 Installed NaturalPoint USB Drivers x64.
14-03-2015 18:27:15 Installed TrackIR 5.
14-03-2015 19:54:06 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
14-03-2015 19:54:38 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
14-03-2015 19:56:29 DirectX wurde installiert
14-03-2015 20:04:55 DirectX wurde installiert
15-03-2015 02:28:16 Windows Update
15-03-2015 15:32:56 Windows Update
18-03-2015 18:13:15 Windows Update
18-03-2015 23:28:48 Windows Update
19-03-2015 22:39:25 Windows Update
19-03-2015 23:24:14 Windows Update
20-03-2015 21:15:38 avast! antivirus system restore point
20-03-2015 21:28:12 Windows Update
21-03-2015 11:20:40 avast! antivirus system restore point
21-03-2015 11:25:07 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
24-03-2015 17:55:32 Windows Update
24-03-2015 18:02:52 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
24-03-2015 18:04:45 OpenOffice 4.1.1 wird installiert
27-03-2015 19:31:42 Windows Update
27-03-2015 22:40:35 Installiert Supreme Commander: Forged Alliance (TM)
27-03-2015 22:41:21 DirectX wurde installiert
27-03-2015 23:01:53 Installed LogMeIn Hamachi
28-03-2015 11:28:28 Sprachpaketdeinstallation
31-03-2015 19:11:27 Windows Update
04-04-2015 12:24:08 avast! antivirus system restore point
04-04-2015 12:30:08 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
04-04-2015 12:50:15 Microsoft Visual C++ 2005 Redistributable wird installiert
04-04-2015 16:07:27 Windows Update
10-04-2015 14:44:38 Windows Update
10-04-2015 17:47:19 Installed PBO Manager v.1.4 beta
11-04-2015 20:01:09 Installed Nero 9 Lite 4.4.9.0
12-04-2015 23:20:30 Windows Update
15-04-2015 22:29:20 Windows Update
20-04-2015 17:17:02 avast! antivirus system restore point
21-04-2015 17:32:01 Windows Update
21-04-2015 18:41:21 avast! antivirus system restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-04-22 17:45 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05D4D76C-2EB6-40F7-A9CD-EAA0AD2BBD42} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {09CF19DE-5B12-432B-8E92-E8F5603775BA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {0D68C265-AEEF-4B0B-A889-6B5F966BEDF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {3A535677-9F47-41A1-9197-75D6A8EC868B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {40C01A7B-921E-4BFD-8BE5-AB773CCC293D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-04-21] (Avast Software s.r.o.)
Task: {669C62C7-9B7C-4B73-8706-EE5FF0E89A5E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {67E7FEAC-3028-45AC-8C16-2242922B0197} - System32\Tasks\OFFICE2010ACT => C:\Windows\system32\OFFICEICON.vbs
Task: {6F271EA9-E8FC-42F6-8A4E-1233A19FFD7D} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {A013C437-11F7-47ED-BE95-DBF73FE5BC9D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-13] (Google Inc.)
Task: {A38134C5-1487-4901-B62F-DB91BE209E14} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-13] (Google Inc.)
Task: {AFE8E893-8BCC-4529-9A31-7088C7556713} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {D776BAF3-22BD-45B1-BF48-B6FA1E270C8E} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-03-29 12:25 - 2015-03-29 12:25 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2015-04-21 18:42 - 2015-04-21 18:42 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-21 18:41 - 2015-04-21 18:41 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-04-23 16:52 - 2015-04-23 16:52 - 02927104 _____ () C:\Program Files\AVAST Software\Avast\defs\15042300\algo.dll
2015-04-21 18:42 - 2015-04-21 18:42 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-04-21 18:42 - 2015-04-21 18:42 - 01359872 _____ () C:\Program Files\AVAST Software\Avast\libglesv2.dll
2015-04-21 18:42 - 2015-04-21 18:42 - 00212992 _____ () C:\Program Files\AVAST Software\Avast\libegl.dll
2015-03-20 16:15 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-03-20 16:15 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-03-20 16:15 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-03-20 16:15 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-03-20 16:15 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-04-14 22:19 - 2015-04-14 22:19 - 16863920 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7866 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1470623560-831458022-899744248-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-1470623560-831458022-899744248-500 - Administrator - Disabled)
Gast (S-1-5-21-1470623560-831458022-899744248-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1470623560-831458022-899744248-1003 - Limited - Enabled)
Steffen (S-1-5-21-1470623560-831458022-899744248-1001 - Administrator - Enabled) => C:\Users\Steffen

==================== Faulty Device Manager Devices =============

Name: Hamachi Network Interface
Description: Hamachi Network Interface
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn, Inc.
Service: hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/23/2015 05:15:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/23/2015 05:14:17 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (04/23/2015 05:14:17 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (04/23/2015 05:14:17 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (04/23/2015 04:49:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/22/2015 09:03:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/22/2015 06:10:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/22/2015 05:44:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/22/2015 05:05:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/21/2015 07:03:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (04/23/2015 05:33:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Stereoscopic 3D Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/23/2015 05:33:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/23/2015 05:33:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/23/2015 05:33:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/23/2015 05:33:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA GeForce Experience Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/23/2015 05:33:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/23/2015 05:33:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/23/2015 05:33:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/23/2015 05:33:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/23/2015 05:33:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (04/23/2015 05:15:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/23/2015 05:14:17 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (04/23/2015 05:14:17 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (04/23/2015 05:14:17 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (04/23/2015 04:49:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/22/2015 09:03:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/22/2015 06:10:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/22/2015 05:44:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/22/2015 05:05:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/21/2015 07:03:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2015-04-22 17:20:26.549
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-04-22 17:20:26.518
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
Percentage of memory in use: 41%
Total physical RAM: 4078.38 MB
Available physical RAM: 2395.26 MB
Total Pagefile: 8154.94 MB
Available Pagefile: 6024.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:906.34 GB) (Free:452.71 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 683E4646)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=906.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25.1 GB) - (Type=12)

==================== End Of Log ============================


Gruß Steffen

schrauber 24.04.2015 08:00

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Q_wer 24.04.2015 21:43
Hallo,

hier die Logs:

##ESET##
Code:
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=6a6ca9fe0216cf46b47abd1fbf7e3042
# engine=23546
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-04-24 07:20:41
# local_time=2015-04-24 09:20:41 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 91 267551 268787 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 17377 181533091 0 0
# scanned=285329
# found=3
# cleaned=0
# scan_time=16250
sh=B4BF9ED480A5501FF31E1F6CF763CC7CD29FCC7C ft=0 fh=0000000000000000 vn="Variante von Win32/Somoto.A evtl. unerwünschte Anwendung" ac=I fn="E:\STEFFENPC\Backup Set 2012-01-08 190001\Backup Files 2012-01-22 193609\Backup files 1.zip"
sh=20A0C927C39792EBE0B37F20A1FE99C6AA4C0935 ft=0 fh=0000000000000000 vn="Variante von Win32/Somoto.A evtl. unerwünschte Anwendung" ac=I fn="E:\STEFFENPC\Backup Set 2012-02-05 201117\Backup Files 2012-02-05 201117\Backup files 4.zip"
sh=8A803A65EC7F9C9676213EC52486A603A3BCEAA9 ft=0 fh=0000000000000000 vn="Variante von Win32/Somoto.A evtl. unerwünschte Anwendung" ac=I fn="E:\STEFFENPC\Backup Set 2012-05-18 194641\Backup Files 2012-05-18 194641\Backup files 5.zip"
##SecurityCheck##
Code:
Results of screen317's Security Check version 1.00 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
avast! Antivirus 
 Antivirus up to date!  (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
 Spybot - Search & Destroy
 Java 8 Update 40 
 Adobe Flash Player 10 Flash Player out of Date!
 Adobe Flash Player 17.0.0.169 
 Mozilla Firefox (37.0.2)
 Google Chrome (41.0.2272.118)
 Google Chrome (42.0.2311.90)
````````Process Check: objlist.exe by Laurent```````` 
 Spybot Teatimer.exe is disabled!
 AVAST Software Avast AvastSvc.exe 
 AVAST Software Avast avastui.exe 
 AVAST Software Avast ng vbox\AvastVBoxSVC.exe
 AVAST Software Avast ng ngservice.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
##FRST (FRST.txt)##

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
Ran by Steffen (administrator) on STEFFEN-LENOVPC on 24-04-2015 22:37:35
Running from C:\Users\Steffen\Desktop
Loaded Profiles: Steffen (Available profiles: Steffen)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11543656 2010-10-26] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-02-26] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-04-21] (Avast Software s.r.o.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-21] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} =>  No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} =>  No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} =>  No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} =>  No File
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1470623560-831458022-899744248-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1470623560-831458022-899744248-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=LEND&bmod=LEND
HKU\S-1-5-21-1470623560-831458022-899744248-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-23] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Extension: Rocket Beans TV Sendeplan für Firefox - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default\Extensions\javos-firebeans-rbtvfx@jetpack.xpi [2015-03-14]
FF Extension: Adblock Plus - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\mh2gpxuz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-03-13]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-21]

Chrome:
=======
CHR HomePage: Default ->
CHR StartupUrls: Default -> "https://de.yahoo.com?fr=hp-avast&type=prc265"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-03-13]
CHR Extension: (Avast Online Security) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-13]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Google Wallet) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-13]
CHR Extension: (Abstract-Blue) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\plnacehkknmafkjgkikclamogikoiaaa [2015-03-13]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-21]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-21] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-04-21] (Avast Software)
S2 AVMPowerlineService; C:\Program Files (x86)\FRITZ!Powerline\PowerlineService.exe [139264 2014-05-21] (AVM GmbH) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-02-16] (LogMeIn, Inc.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-21] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-21] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-21] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-21] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [441728 2015-04-21] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-21] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [268640 2015-04-21] ()
S3 CM_VENDER_CMD; C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [17104 2014-07-31] (Windows (R) Win 7 DDK provider)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 npusbio; C:\Windows\System32\Drivers\npusbio_x64.sys [38400 2012-07-09] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-02-05] (NVIDIA Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-21] (Avast Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-24 22:37 - 2015-04-24 22:37 - 00014524 _____ () C:\Users\Steffen\Desktop\FRST.txt
2015-04-24 22:36 - 2015-04-24 22:36 - 00001082 _____ () C:\Users\Steffen\Desktop\checkup.txt
2015-04-24 16:52 - 2015-04-24 16:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-23 21:32 - 2015-04-24 19:25 - 00001469 _____ () C:\windows\setupact.log
2015-04-23 21:32 - 2015-04-23 21:32 - 00000000 _____ () C:\windows\setuperr.log
2015-04-23 21:14 - 2015-04-23 21:29 - 00000000 ____D () C:\Users\Steffen\Documents\Network Monitor 3
2015-04-23 21:14 - 2015-04-23 21:14 - 00001016 _____ () C:\Users\Public\Desktop\Microsoft Network Monitor 3.4.lnk
2015-04-23 21:14 - 2015-04-23 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Network Monitor 3.4
2015-04-23 21:14 - 2015-04-23 21:14 - 00000000 ____D () C:\Program Files\Microsoft Network Monitor 3
2015-04-23 21:11 - 2015-04-23 21:12 - 06837560 _____ (Microsoft Corporation) C:\Users\Steffen\Downloads\NM34_x64.exe
2015-04-23 20:45 - 2015-04-23 20:59 - 00000000 ____D () C:\ProgramData\SecTaskMan
2015-04-23 20:45 - 2015-04-23 20:45 - 00001158 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spy Protector.lnk
2015-04-23 20:45 - 2015-04-23 20:45 - 00001147 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager.lnk
2015-04-23 20:45 - 2015-04-23 20:45 - 00001135 _____ () C:\Users\Public\Desktop\Security Task Manager.lnk
2015-04-23 20:45 - 2015-04-23 20:45 - 00000000 ____D () C:\Users\Steffen\AppData\Local\SecTaskMan
2015-04-23 20:45 - 2015-04-23 20:45 - 00000000 ____D () C:\Program Files (x86)\Security Task Manager
2015-04-23 20:39 - 2015-04-23 20:44 - 00007683 _____ () C:\Users\Steffen\AppData\Local\resmon.resmoncfg
2015-04-23 20:30 - 2015-04-23 20:30 - 00000000 ____D () C:\windows\pss
2015-04-23 20:24 - 2015-04-23 21:01 - 00002808 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2015-04-23 20:24 - 2015-04-23 20:24 - 00000000 ____D () C:\Program Files\CCleaner
2015-04-23 17:32 - 2015-04-23 17:32 - 00000207 _____ () C:\windows\tweaking.com-regbackup-STEFFEN-LENOVPC-Windows-7-Home-Premium-(64-bit).dat
2015-04-23 17:32 - 2015-04-23 17:32 - 00000000 ____D () C:\RegBackup
2015-04-23 17:31 - 2015-04-08 22:32 - 00560968 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvStreaming.exe
2015-04-23 17:30 - 2015-04-09 02:58 - 00078480 _____ (Khronos Group) C:\windows\system32\OpenCL.dll
2015-04-23 17:30 - 2015-04-09 02:58 - 00066704 _____ (Khronos Group) C:\windows\SysWOW64\OpenCL.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 06841488 _____ (NVIDIA Corporation) C:\windows\system32\nvcpl.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 03478344 _____ (NVIDIA Corporation) C:\windows\system32\nvsvc64.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 02558608 _____ (NVIDIA Corporation) C:\windows\system32\nvsvcr.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 00936264 _____ (NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
2015-04-23 17:30 - 2015-04-08 23:30 - 00385168 _____ (NVIDIA Corporation) C:\windows\system32\nvmctray.dll
2015-04-23 17:30 - 2015-04-08 23:30 - 00062608 _____ (NVIDIA Corporation) C:\windows\system32\nvshext.dll
2015-04-23 17:30 - 2015-04-08 19:52 - 04336074 _____ () C:\windows\system32\nvcoproc.bin
2015-04-23 17:28 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6435012.dll
2015-04-23 17:28 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6435012.dll
2015-04-23 17:28 - 2015-04-09 02:58 - 01540240 _____ (NVIDIA Corporation) C:\windows\system32\nvhdagenco6420103.dll
2015-04-23 17:28 - 2015-04-09 02:58 - 00195728 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvhda64v.sys
2015-04-23 17:28 - 2015-04-09 02:58 - 00030536 _____ (NVIDIA Corporation) C:\windows\system32\nvhdap64.dll
2015-04-23 17:27 - 2015-04-23 17:27 - 00000000 __SHD () C:\Users\Steffen\AppData\Local\EmieUserList
2015-04-23 17:27 - 2015-04-23 17:27 - 00000000 __SHD () C:\Users\Steffen\AppData\Local\EmieSiteList
2015-04-23 17:27 - 2015-04-23 17:27 - 00000000 __SHD () C:\Users\Steffen\AppData\Local\EmieBrowserModeList
2015-04-23 17:27 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\windows\system32\nvcompiler.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcompiler.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 17176128 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 14617288 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 12689592 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys
2015-04-23 17:27 - 2015-04-09 02:58 - 03317344 _____ (NVIDIA Corporation) C:\windows\system32\nvapi64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 02935416 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvapi.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\windows\system32\nvumdshimx.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvumdshim.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\windows\system32\nvinitx.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvinit.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll
2015-04-23 17:27 - 2015-04-09 02:58 - 00029329 _____ () C:\windows\system32\nvinfo.pb
2015-04-23 17:10 - 2015-04-23 17:12 - 00000000 ____D () C:\AdwCleaner
2015-04-23 16:55 - 2015-04-23 16:55 - 00001102 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-04-23 16:55 - 2015-04-23 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-23 16:55 - 2015-04-23 16:55 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-23 16:55 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-04-23 16:55 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2015-04-23 16:49 - 2015-04-24 22:37 - 00000000 ____D () C:\Users\Steffen\Desktop\Trojaner-Board
2015-04-22 17:10 - 2015-04-22 17:54 - 00000000 ____D () C:\Qoobox
2015-04-22 17:10 - 2015-04-22 17:52 - 00000000 ____D () C:\windows\erdnt
2015-04-22 17:10 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2015-04-22 17:10 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2015-04-22 17:10 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2015-04-22 17:10 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2015-04-21 21:03 - 2015-04-24 16:27 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-21 21:03 - 2015-04-23 16:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-21 21:03 - 2015-04-21 21:15 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-04-21 21:02 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2015-04-21 21:01 - 2015-04-21 21:16 - 00000000 ____D () C:\Users\Steffen\Desktop\mbar
2015-04-21 18:43 - 2015-04-21 18:43 - 00001922 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-21 18:43 - 2015-04-21 18:43 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\AVAST Software
2015-04-21 18:43 - 2015-04-21 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-04-21 18:42 - 2015-04-23 21:36 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2015-04-21 18:42 - 2015-04-21 18:42 - 00441728 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswSP.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00364472 _____ (Avast Software s.r.o.) C:\windows\system32\aswBoot.exe
2015-04-21 18:42 - 2015-04-21 18:42 - 00268640 _____ () C:\windows\system32\Drivers\aswVmm.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00136752 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswStm.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00093528 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswRdr2.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00088408 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswMonFlt.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00065736 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2015-04-21 18:42 - 2015-04-21 18:42 - 00043112 _____ (Avast Software s.r.o.) C:\windows\avastSS.scr
2015-04-21 18:42 - 2015-04-21 18:42 - 00029168 _____ () C:\windows\system32\Drivers\aswHwid.sys
2015-04-21 18:42 - 2015-04-21 18:41 - 01047320 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswSnx.sys
2015-04-21 18:41 - 2015-04-21 18:41 - 00000000 ____D () C:\Program Files\AVAST Software
2015-04-21 17:45 - 2015-04-24 22:37 - 00000000 ____D () C:\FRST
2015-04-21 17:44 - 2015-04-21 17:44 - 02099712 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2015-04-21 17:43 - 2015-04-21 17:43 - 00000000 _____ () C:\Users\Steffen\defogger_reenable
2015-04-20 17:11 - 2015-04-20 17:11 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-20 17:11 - 2015-04-20 17:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-04-20 17:11 - 2015-04-20 17:11 - 00000000 ____D () C:\Program Files\7-Zip
2015-04-18 12:33 - 2015-04-18 12:50 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3 Launcher
2015-04-18 12:23 - 2015-04-18 12:23 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Blender Foundation
2015-04-16 16:42 - 2015-04-16 16:42 - 00000000 ___SD () C:\windows\system32\CompatTel
2015-04-16 16:42 - 2015-04-16 16:42 - 00000000 ____D () C:\windows\system32\appraiser
2015-04-15 16:54 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-04-15 16:54 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-04-15 16:54 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-04-15 16:54 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-04-15 16:54 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-04-15 16:54 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-04-15 16:54 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-04-15 16:54 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-04-15 16:54 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2015-04-15 16:54 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-04-15 16:54 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-04-15 16:54 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-04-15 16:54 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-04-15 16:54 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-04-15 16:54 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-04-15 16:54 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2015-04-15 16:54 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2015-04-15 16:54 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe
2015-04-15 16:53 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-04-15 16:53 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-04-15 16:53 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-04-15 16:53 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-04-15 16:53 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-04-15 16:53 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-04-15 16:53 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-04-15 16:53 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-04-15 16:53 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-04-15 16:53 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-04-15 16:53 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-04-15 16:53 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-04-15 16:53 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-04-15 16:53 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-04-15 16:53 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-04-15 16:53 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-04-15 16:53 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-04-15 16:53 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-04-15 16:53 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-04-15 16:53 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-04-15 16:53 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-04-15 16:53 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-04-15 16:53 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-04-15 16:53 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-04-15 16:53 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 16:53 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 16:53 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-04-15 16:53 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-04-15 16:53 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-04-15 16:53 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-04-15 16:53 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-04-15 16:53 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-04-15 16:53 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-04-15 16:53 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-04-15 16:53 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-04-15 16:53 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-04-15 16:53 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-04-15 16:53 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-04-15 16:53 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-04-15 16:53 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-04-15 16:53 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-04-15 16:53 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-04-15 16:53 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-04-15 16:53 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-04-15 16:53 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-04-15 16:53 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-04-15 16:53 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 16:53 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-04-15 16:53 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-04-15 16:53 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-04-15 16:53 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-04-15 16:53 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-04-15 16:53 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-04-15 16:53 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-04-15 16:53 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-04-15 16:53 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-04-15 16:53 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-04-15 16:53 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-04-15 16:53 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-04-15 16:53 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-04-15 16:53 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-04-15 16:53 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-04-15 16:53 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-04-15 16:53 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-04-15 16:53 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-04-15 16:53 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-04-15 16:53 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-15 16:53 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-04-15 16:53 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-04-15 16:53 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-04-15 16:53 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-04-15 16:53 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-04-15 16:53 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-04-15 16:53 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-04-15 16:53 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-04-15 16:53 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-04-15 16:53 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-04-15 16:53 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-04-15 16:53 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-04-15 16:53 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-04-15 16:53 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-04-15 16:53 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-04-15 16:53 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\http.sys
2015-04-15 16:52 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\windows\system32\clfs.sys
2015-04-15 16:52 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\windows\system32\clfsw32.dll
2015-04-15 16:52 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\windows\SysWOW64\clfsw32.dll
2015-04-14 22:31 - 2015-04-14 22:31 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-04-14 17:34 - 2015-04-14 17:35 - 00001212 _____ () C:\Users\Steffen\Desktop\QWR_Lights.sqf
2015-04-13 22:13 - 2015-04-13 22:13 - 00012583 _____ () C:\Users\Steffen\AppData\Local\recently-used.xbel
2015-04-12 23:21 - 2015-04-12 23:21 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2015-04-12 23:14 - 2015-04-12 23:15 - 00280617 _____ () C:\Users\Steffen\Documents\ts3_clientui-win64-1407159763-2015-04-12 23_14_59.942824.dmp
2015-04-11 23:33 - 2015-04-12 21:12 - 00001046 _____ () C:\Users\Steffen\Desktop\QWR_Bul.sqf
2015-04-11 20:03 - 2015-04-11 20:20 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\ProgramData\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2015-04-11 20:02 - 2015-04-11 20:02 - 00000000 ____D () C:\Program Files (x86)\Nero
2015-04-11 19:23 - 2015-04-12 15:08 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Spotify
2015-04-11 19:23 - 2015-04-11 19:23 - 00001808 _____ () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-04-11 19:21 - 2015-04-12 15:08 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Spotify
2015-04-10 17:51 - 2015-04-10 17:52 - 00000000 ____D () C:\Users\Steffen\Documents\BIS Core Engine
2015-04-10 17:47 - 2015-04-10 17:49 - 00000000 ____D () C:\Users\Steffen\AppData\Local\PboM
2015-04-10 17:47 - 2015-04-10 17:47 - 00002607 _____ () C:\Users\Public\Desktop\PBOManager v.1.4 beta.lnk
2015-04-10 17:47 - 2015-04-10 17:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PBO Manager
2015-04-10 17:47 - 2015-04-10 17:47 - 00000000 ____D () C:\Program Files (x86)\PBO Manager v.1.4 beta
2015-04-10 17:43 - 2015-04-10 17:43 - 00001897 _____ () C:\Users\Public\Desktop\Blender.lnk
2015-04-10 17:43 - 2015-04-10 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation
2015-04-10 17:43 - 2015-04-10 17:43 - 00000000 ____D () C:\Program Files\Blender Foundation
2015-04-05 23:51 - 2015-04-06 00:07 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Natural Selection 2
2015-04-04 17:20 - 2015-04-18 12:33 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Bohemia_Interactive
2015-04-04 17:20 - 2015-04-04 17:20 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3 Publisher
2015-04-04 16:08 - 2015-04-04 16:08 - 00000000 ___SD () C:\windows\SysWOW64\GWX
2015-04-04 16:08 - 2015-04-04 16:08 - 00000000 ___SD () C:\windows\system32\GWX
2015-04-04 13:24 - 2015-04-05 15:41 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Bohemia_Interactive_a.s
2015-04-04 12:43 - 2015-04-04 12:43 - 00000222 _____ () C:\Users\Steffen\Desktop\Arma 3 Tools.url
2015-04-04 12:40 - 2015-04-13 22:13 - 00000000 ____D () C:\Users\Steffen\AppData\Local\gtk-2.0
2015-04-04 12:39 - 2015-04-10 17:44 - 00000000 ____D () C:\Users\Steffen\.thumbnails
2015-04-04 12:25 - 2015-04-13 22:13 - 00000000 ____D () C:\Users\Steffen\.gimp-2.8
2015-04-04 12:25 - 2015-04-04 12:25 - 00000000 ____D () C:\Users\Steffen\AppData\Local\gegl-0.2
2015-04-04 02:43 - 2015-04-04 02:43 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-04-04 02:43 - 2015-04-04 02:43 - 00000000 ____D () C:\Program Files\GIMP 2
2015-04-04 01:40 - 2015-04-04 01:40 - 00000000 ____D () C:\Users\Steffen\AppData\Local\CrashRpt
2015-04-01 20:15 - 2009-06-10 23:00 - 00000824 _____ () C:\windows\system32\Drivers\etc\hosts.20150401-201532.backup
2015-03-29 00:06 - 2015-03-29 00:06 - 00000000 ____D () C:\Users\Steffen\AppData\Local\DCS
2015-03-28 15:03 - 2015-04-11 20:18 - 00000000 ____D () C:\Users\Steffen\Desktop\MusikStreams
2015-03-27 23:13 - 2015-03-29 15:51 - 00000000 ____D () C:\Users\Steffen\Documents\My Games
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Users\Steffen\Documents\Eigene Spiele
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Gas Powered Games
2015-03-27 23:13 - 2015-03-27 23:13 - 00000000 ____D () C:\Program Files (x86)\Sorian AI Mod
2015-03-27 23:05 - 2015-04-23 20:27 - 00000000 ____D () C:\Users\Steffen\AppData\Local\LogMeIn Hamachi
2015-03-27 23:05 - 2015-03-27 23:05 - 00000000 ____D () C:\Users\Steffen\AppData\Local\LogMeIn
2015-03-27 23:05 - 2015-03-27 23:05 - 00000000 ____D () C:\ProgramData\LogMeIn
2015-03-27 23:02 - 2015-03-27 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-03-27 23:02 - 2015-03-27 23:02 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2015-03-27 22:54 - 2015-04-23 17:31 - 00000000 ____D () C:\temp
2015-03-27 22:54 - 2015-03-27 22:54 - 00002596 _____ () C:\Users\Public\Desktop\Forged Alliance.lnk
2015-03-27 22:53 - 2015-03-27 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ
2015-03-27 22:43 - 2015-03-27 22:43 - 00000000 ____D () C:\Program Files (x86)\THQ
2015-03-25 00:01 - 2015-03-25 00:01 - 00278053 _____ () C:\Users\Steffen\Documents\ts3_clientui-win64-1407159763-2015-03-24 23_01_47.647175.dmp

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-24 21:00 - 2012-06-15 01:06 - 02067010 _____ () C:\windows\WindowsUpdate.log
2015-04-24 20:32 - 2015-03-13 17:13 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\TS3Client
2015-04-24 20:32 - 2015-03-13 17:03 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-24 20:25 - 2015-03-13 22:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-24 16:49 - 2015-03-15 02:34 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Notepad++
2015-04-24 16:41 - 2012-06-15 01:48 - 00699416 _____ () C:\windows\system32\perfh007.dat
2015-04-24 16:41 - 2012-06-15 01:48 - 00149556 _____ () C:\windows\system32\perfc007.dat
2015-04-24 16:41 - 2009-07-14 07:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2015-04-24 16:34 - 2009-07-14 06:45 - 00020480 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-24 16:34 - 2009-07-14 06:45 - 00020480 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-24 16:24 - 2012-06-15 01:58 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-24 16:24 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-04-23 21:39 - 2015-03-13 16:38 - 00000000 ____D () C:\Users\Steffen\Documents\Wichtig
2015-04-23 21:32 - 2015-03-13 23:13 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-04-23 21:12 - 2015-03-13 23:13 - 00778416 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2015-04-23 21:12 - 2015-03-13 23:13 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-23 21:12 - 2015-03-13 23:13 - 00003824 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2015-04-23 21:12 - 2015-03-13 23:12 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Adobe
2015-04-23 20:55 - 2012-06-15 02:08 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-23 20:55 - 2012-06-15 02:08 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-23 20:31 - 2012-06-15 02:16 - 00003488 _____ () C:\windows\System32\Tasks\OFFICE2010ACT
2015-04-23 20:31 - 2012-06-15 02:08 - 00004120 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-04-23 20:31 - 2012-06-15 02:08 - 00003868 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-04-23 20:26 - 2015-03-14 20:33 - 00000000 ____D () C:\Users\Steffen\AppData\Local\CrashDumps
2015-04-23 20:26 - 2011-02-12 21:33 - 00000000 ____D () C:\windows\Panther
2015-04-23 17:31 - 2015-03-13 19:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-04-23 17:31 - 2012-06-15 01:08 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-04-23 17:30 - 2012-06-15 01:08 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-04-23 17:30 - 2012-06-15 01:07 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-04-23 17:30 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\Help
2015-04-23 17:19 - 2015-03-13 19:36 - 00001377 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-04-22 17:45 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2015-04-21 18:58 - 2015-03-13 19:21 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-21 18:40 - 2015-03-13 16:51 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-04-21 17:43 - 2015-03-13 16:25 - 00000000 ____D () C:\Users\Steffen
2015-04-19 21:47 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF
2015-04-19 17:51 - 2015-03-14 20:01 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\FileZilla
2015-04-19 17:51 - 2015-03-14 16:32 - 00000000 ____D () C:\Program Files (x86)\ArmA3Sync-1-4-58
2015-04-19 17:46 - 2015-03-14 20:00 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Arma 3
2015-04-18 17:22 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2015-04-16 22:29 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\AppCompat
2015-04-16 16:42 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2015-04-15 22:37 - 2012-06-15 02:02 - 01593956 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2015-04-15 22:35 - 2015-03-18 18:22 - 00000000 ____D () C:\windows\system32\MRT
2015-04-15 22:32 - 2015-03-18 18:22 - 128913832 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-04-12 21:11 - 2015-03-24 19:07 - 00000675 _____ () C:\Users\Steffen\Desktop\QWR_Mir.sqf
2015-04-11 20:17 - 2015-03-22 23:22 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\vlc
2015-04-01 20:11 - 2015-03-20 16:15 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-29 20:17 - 2015-03-14 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-03-29 20:17 - 2015-03-14 20:01 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-03-29 15:51 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-28 22:07 - 2011-02-15 12:41 - 00000000 ____D () C:\Program Files\Windows Journal
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\winrm
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\WCN
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\sysprep
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\SysWOW64\Printing_Admin_Scripts
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\winrm
2015-03-28 22:07 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\slmgr
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-03-28 22:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Setup
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\oobe
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\MUI
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\migwiz
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\com
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\sysprep
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Setup
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\oobe
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\migwiz
2015-03-28 22:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-28 22:06 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\WCN
2015-03-28 22:06 - 2010-11-21 09:06 - 00000000 ____D () C:\windows\system32\Printing_Admin_Scripts
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\MUI
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2015-03-28 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\com
2015-03-28 05:44 - 2015-03-13 19:35 - 01316000 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll
2015-03-28 05:44 - 2015-03-13 19:35 - 01316000 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll
2015-03-28 05:43 - 2015-03-13 19:35 - 01756424 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll
2015-03-28 05:43 - 2015-03-13 19:35 - 01570672 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll
2015-03-27 22:41 - 2012-06-15 01:05 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-25 17:36 - 2009-07-14 06:45 - 00289736 _____ () C:\windows\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2015-04-13 22:13 - 2015-04-13 22:13 - 0012583 _____ () C:\Users\Steffen\AppData\Local\recently-used.xbel
2015-04-23 20:39 - 2015-04-23 20:44 - 0007683 _____ () C:\Users\Steffen\AppData\Local\resmon.resmoncfg
2012-06-15 02:04 - 2012-06-15 02:04 - 1914000 _____ (Adobe Systems Incorporated) C:\ProgramData\flashax10.exe

Files to move or delete:
====================
C:\ProgramData\flashax10.exe


Some content of TEMP:
====================
C:\Users\Steffen\AppData\Local\Temp\nvStInst.exe
C:\Users\Steffen\AppData\Local\Temp\Quarantine.exe
C:\Users\Steffen\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-24 21:58

==================== End Of Log ============================
--- --- ---


##FRST [Addition.txt] ##
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015
Ran by Steffen at 2015-04-24 22:38:08
Running from C:\Users\Steffen\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Arma 3 Tools (HKLM-x32\...\Steam App 233800) (Version:  - Bohemia Interactive)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2214 - AVAST Software)
Blender (HKLM\...\Blender) (Version: 2.74 - Blender Foundation)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Counter-Strike (HKLM-x32\...\Steam App 10) (Version:  - Valve)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DCS World (HKLM-x32\...\Steam App 223750) (Version:  - Eagle Dynamics)
FileZilla Client 3.10.3 (HKLM-x32\...\FileZilla Client) (Version: 3.10.3 - Tim Kosse)
FRITZ!Powerline (HKLM-x32\...\{F9C9378B-78D5-4CC0-8683-B7915DFEA9C5}) (Version: 01.00.65 - AVM Berlin)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.)
Google Update Helper (x32 Version: 1.2.183.39 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
GPGNet (HKLM-x32\...\{C194D333-B84A-4BB7-B35E-060732D98DC4}) (Version: 1.0.0 - Gas Powered Games)
Hercules WiFi Station (HKLM-x32\...\{1157EAA9-33E6-43A3-8ECC-20518A2284F8}) (Version: 3.4.0.0 - Hercules)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Blacksilk USB Keyboard Driver (HKLM-x32\...\{B266E062-D6C5-485B-B426-51B152B041A6}) (Version: V1.4.11.0608 - Lenovo)
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.4 - Lenovo Inc.)
Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.2431 - CyberLink Corp.)
Lenovo Rescue System (Version: 3.0.2431 - CyberLink Corp.) Hidden
Lenovo Treiber- und Anwendungsinstallation (HKLM-x32\...\{45970CD1-D599-47D4-938F-3E9800D54ED1}) (Version: 5.10.3426 - Lenovo)
Life is Feudal: Your Own (HKLM-x32\...\Steam App 290080) (Version:  - Bitbox Ltd.)
Logitech G430 Driver (HKLM-x32\...\G430_Driver) (Version: 8.53.0.2 - Logitech)
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.177 - Logitech Inc.)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.319 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.319 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Network Monitor 3.4 (HKLM\...\{8C5B5A11-CBF8-451B-B201-77FAB0D0B77D}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Network Monitor: NetworkMonitor Parsers 3.4 (HKLM\...\{963E5FEB-1367-46B9-851D-A957F1A3747F}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version:  - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Natural Selection 2 (HKLM-x32\...\Steam App 4920) (Version:  - Unknown Worlds Entertainment)
NaturalPoint USB Drivers x64 (HKLM\...\{B408139D-04D6-4464-A979-D335E48F7063}) (Version: 2.50.0000 - NaturalPoint)
Nero 9 Lite (HKLM-x32\...\{102fab7a-3c58-44de-9aba-f1b2d9282ada}) (Version:  - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PBO Manager v.1.4 beta (HKLM-x32\...\{0E3A79BF-E860-4371-8ABC-7AAEDD68DA0A}) (Version: 1.4.0 -  )
Planetary Annihilation (HKLM-x32\...\Steam App 233250) (Version:  - Uber Entertainment)
Play withSIX Windows client (HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\PlaywithSIX) (Version: 1.66.1146.4 - SIX Networks GmbH)
POSTAL 2 (HKLM-x32\...\Steam App 223470) (Version:  - Running With Scissors)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6230 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden
Security Task Manager 2.0d (HKLM-x32\...\Security Task Manager) (Version: 2.0d - Neuber Software)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Sorian AI Mod 2.1.1 (HKLM-x32\...\Sorian AI Mod_is1) (Version:  - )
Spotify (HKU\S-1-5-21-1470623560-831458022-899744248-1001\...\Spotify) (Version: 1.0.3.101.gbfa97dfe - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Supreme Commander - Forged Alliance (HKLM-x32\...\{31D95937-B237-405D-920C-A3EF4E482395}) (Version: 1.00.0000 - Gas Powered Games)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TrackIR 5 (HKLM-x32\...\{2f2e6053-043c-4d69-94d0-4d42304ea4ee}) (Version: 5.2.0200 - NaturalPoint)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1470623560-831458022-899744248-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()

==================== Restore Points  =========================

14-03-2015 10:56:37 Windows Update
14-03-2015 16:15:11 Installed 7-Zip 9.20 (x64 edition)
14-03-2015 17:34:12 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
14-03-2015 17:35:04 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
14-03-2015 17:37:24 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
14-03-2015 17:38:28 Microsoft Visual C++ 2005 Redistributable wird installiert
14-03-2015 17:40:05 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
14-03-2015 17:43:21 DirectX wurde installiert
14-03-2015 18:26:28 Installed NaturalPoint USB Drivers x64.
14-03-2015 18:27:15 Installed TrackIR 5.
14-03-2015 19:54:06 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
14-03-2015 19:54:38 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
14-03-2015 19:56:29 DirectX wurde installiert
14-03-2015 20:04:55 DirectX wurde installiert
15-03-2015 02:28:16 Windows Update
15-03-2015 15:32:56 Windows Update
18-03-2015 18:13:15 Windows Update
18-03-2015 23:28:48 Windows Update
19-03-2015 22:39:25 Windows Update
19-03-2015 23:24:14 Windows Update
20-03-2015 21:15:38 avast! antivirus system restore point
20-03-2015 21:28:12 Windows Update
21-03-2015 11:20:40 avast! antivirus system restore point
21-03-2015 11:25:07 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
24-03-2015 17:55:32 Windows Update
24-03-2015 18:02:52 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
24-03-2015 18:04:45 OpenOffice 4.1.1 wird installiert
27-03-2015 19:31:42 Windows Update
27-03-2015 22:40:35 Installiert Supreme Commander: Forged Alliance (TM)
27-03-2015 22:41:21 DirectX wurde installiert
27-03-2015 23:01:53 Installed LogMeIn Hamachi
28-03-2015 11:28:28 Sprachpaketdeinstallation
31-03-2015 19:11:27 Windows Update
04-04-2015 12:24:08 avast! antivirus system restore point
04-04-2015 12:30:08 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
04-04-2015 12:50:15 Microsoft Visual C++ 2005 Redistributable wird installiert
04-04-2015 16:07:27 Windows Update
10-04-2015 14:44:38 Windows Update
10-04-2015 17:47:19 Installed PBO Manager v.1.4 beta
11-04-2015 20:01:09 Installed Nero 9 Lite 4.4.9.0
12-04-2015 23:20:30 Windows Update
15-04-2015 22:29:20 Windows Update
20-04-2015 17:17:02 avast! antivirus system restore point
21-04-2015 17:32:01 Windows Update
21-04-2015 18:41:21 avast! antivirus system restore point
23-04-2015 21:13:23 Installed Microsoft Network Monitor 3.4
23-04-2015 21:14:27 Installed Microsoft Network Monitor: NetworkMonitor Parsers 3.4

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-04-22 17:45 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05D4D76C-2EB6-40F7-A9CD-EAA0AD2BBD42} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {09CF19DE-5B12-432B-8E92-E8F5603775BA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-23] (Adobe Systems Incorporated)
Task: {0D68C265-AEEF-4B0B-A889-6B5F966BEDF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {3A535677-9F47-41A1-9197-75D6A8EC868B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {40C01A7B-921E-4BFD-8BE5-AB773CCC293D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-04-21] (Avast Software s.r.o.)
Task: {669C62C7-9B7C-4B73-8706-EE5FF0E89A5E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {67E7FEAC-3028-45AC-8C16-2242922B0197} - System32\Tasks\OFFICE2010ACT => C:\Windows\system32\OFFICEICON.vbs
Task: {6F03E342-A487-489C-A4A9-6CE2593C1A74} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {6F271EA9-E8FC-42F6-8A4E-1233A19FFD7D} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {A013C437-11F7-47ED-BE95-DBF73FE5BC9D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-13] (Google Inc.)
Task: {A38134C5-1487-4901-B62F-DB91BE209E14} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-13] (Google Inc.)
Task: {AFE8E893-8BCC-4529-9A31-7088C7556713} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {D776BAF3-22BD-45B1-BF48-B6FA1E270C8E} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-04-23 17:30 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-03-29 12:25 - 2015-03-29 12:25 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-02-26 20:39 - 2015-02-26 20:39 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-02-26 20:39 - 2015-02-26 20:39 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-04-21 18:42 - 2015-04-21 18:42 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-21 18:41 - 2015-04-21 18:41 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-04-23 20:21 - 2015-04-23 20:21 - 02927104 _____ () C:\Program Files\AVAST Software\Avast\defs\15042301\algo.dll
2015-04-24 16:27 - 2015-04-24 16:27 - 02927104 _____ () C:\Program Files\AVAST Software\Avast\defs\15042400\algo.dll
2015-04-21 18:42 - 2015-04-21 18:42 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-04-23 17:19 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-03-20 16:15 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-03-20 16:15 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-03-20 16:15 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-04-21 18:42 - 2015-04-21 18:42 - 01359872 _____ () C:\Program Files\AVAST Software\Avast\libglesv2.dll
2015-04-21 18:42 - 2015-04-21 18:42 - 00212992 _____ () C:\Program Files\AVAST Software\Avast\libegl.dll
2015-03-20 16:15 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-03-20 16:15 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7866 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1470623560-831458022-899744248-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WiFi Station.lnk => C:\windows\pss\WiFi Station.lnk.CommonStartup
MSCONFIG\startupreg: jmekey => C:\windows\jmesoft\hotkey.exe
MSCONFIG\startupreg: jmesoft => C:\Windows\jmesoft\ServiceLoader.exe
MSCONFIG\startupreg: Lenovo Registration => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe /boot
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: ShadowPlay => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Steffen\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: UpdatePRCShortCut => "C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"

==================== Accounts: =============================

Administrator (S-1-5-21-1470623560-831458022-899744248-500 - Administrator - Disabled)
Gast (S-1-5-21-1470623560-831458022-899744248-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1470623560-831458022-899744248-1003 - Limited - Enabled)
Steffen (S-1-5-21-1470623560-831458022-899744248-1001 - Administrator - Enabled) => C:\Users\Steffen

==================== Faulty Device Manager Devices =============

Name: Hamachi Network Interface
Description: Hamachi Network Interface
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn, Inc.
Service: hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/24/2015 10:37:29 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 09:25:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 04:37:35 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 04:37:33 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 04:37:33 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 04:34:44 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 04:34:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 04:34:35 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 04:33:26 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (04/24/2015 04:26:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0x52c
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3


System errors:
=============
Error: (04/24/2015 10:28:34 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT-AUTORITÄT)
Description: 0x8000002a171\??\Volume{c24152ad-b674-11e1-bfdb-806e6f6e6963}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{884750E2-9766-459F-863C-C8DB7C656FA1}

Error: (04/24/2015 10:18:05 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT-AUTORITÄT)
Description: 0x8000002a171\??\Volume{c24152ad-b674-11e1-bfdb-806e6f6e6963}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{C20DF05C-F959-4EA2-A219-2A93814BA7D9}

Error: (04/24/2015 04:39:07 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (04/24/2015 04:39:06 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (04/24/2015 04:25:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/24/2015 04:25:33 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (04/24/2015 04:24:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AVM FRITZ!Powerline Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/24/2015 04:24:32 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst AVM FRITZ!Powerline Service erreicht.

Error: (04/23/2015 09:33:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (04/23/2015 09:33:56 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.


Microsoft Office Sessions:
=========================
Error: (04/24/2015 10:37:29 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Steffen\Desktop\Trojaner-Board\esetsmartinstaller_deu.exe

Error: (04/24/2015 09:25:51 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (04/24/2015 04:37:35 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Steffen\Desktop\esetsmartinstaller_deu.exe

Error: (04/24/2015 04:37:33 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Steffen\Desktop\esetsmartinstaller_deu.exe

Error: (04/24/2015 04:37:33 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Steffen\Desktop\esetsmartinstaller_deu.exe

Error: (04/24/2015 04:34:44 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Steffen\Desktop\esetsmartinstaller_deu.exe

Error: (04/24/2015 04:34:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Steffen\Desktop\esetsmartinstaller_deu.exe

Error: (04/24/2015 04:34:35 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Steffen\Desktop\esetsmartinstaller_deu.exe

Error: (04/24/2015 04:33:26 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Steffen\Desktop\esetsmartinstaller_deu.exe

Error: (04/24/2015 04:26:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.6202551399beNvStreamNetworkService.exe4.1.1943.6202551399bec000000500000000004e920f52c01d07e9a76ea5ab9C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exef38c6af9-ea8d-11e4-9051-c89cdcf3c9f3


CodeIntegrity Errors:
===================================
  Date: 2015-04-22 17:20:26.549
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-04-22 17:20:26.518
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
Percentage of memory in use: 44%
Total physical RAM: 4078.38 MB
Available physical RAM: 2273.05 MB
Total Pagefile: 8154.94 MB
Available Pagefile: 5855.06 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:906.34 GB) (Free:435.58 GB) NTFS
Drive e: (Volume) (Fixed) (Total:931.51 GB) (Free:563.79 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 683E4646)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=906.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25.1 GB) - (Type=12)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 7E3A4FDD)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================

ESET hat 3 Meldungen ghabt aber das waren sehr alte BackUp files von meinem altenm Rechner die noch auf meiner externen Festplatte waren.

Gruß Steffen

schrauber 25.04.2015 15:07
Backups entsorgen. Flash Player updaten.


Noch Probleme?

Q_wer 27.04.2015 16:15
Hi Schrauber,

Backups hab ich gleich nach der Prüfung entsorgt nachdem ich gesehen hab das sie von 2012 sind ^^.
Rechner ist auf jedenfall einwenig schneller... 1 min bis er aufm Desktop landet und 20 sekunden bis Firefox gestartet ist ist auf jedenfall schneller als vorher :D.

FlahsPlayer hab ich akt.


:dankeschoen: & Gruß

Steffen

schrauber 28.04.2015 12:40
http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.


Alle Zeitangaben in WEZ +1. Es ist jetzt 18:22 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131